PT0-002 Exam Questions

A penetration tester is performing a social engineering penetration test and was able to create a remote session. Which of the following social engineering techniques was most like...

A penetration tester requested, without express authorization, that a CVE number be assigned for a new vulnerability found on an internal client application. Which of the following...

A penetration tester observes an application enforcing strict access controls. Which of the following would allow the tester to bypass these controls and successfully access the or...

Penetration-testing activities have concluded, and the initial findings have been reviewed with the client. Which of the following best describes the NEXT step in the engagement?

A penetration tester conducted a discovery scan that generated the following: Which of the following commands generated the results above and will transform them into a list of act...

A penetration tester identified numerous flaws that could lead to unauthorized modification of critical data. Which of the following would be best for the penetration tester to rec...

Which of the following tools would be the best to use to intercept an HTTP response of an API, change its content, and forward it back to the origin mobile device?

A penetration tester is conducting a test after hours and notices a critical system was taken down. Which of the following contacts should be notified first?

During an assessment, a penetration tester found a suspicious script that could indicate a prior compromise. While reading the script, the penetration tester noticed the following...

During an assessment, a penetration tester found a web component with no authentication requirements. The web component also allows file uploads and is hosted on one of the target...

During an assessment, a penetration tester obtains a list of password digests using Responder. Which of the following tools would the penetration tester most likely use next?

A penetration tester is performing a vulnerability scan on a large ATM network. One of the organization's requirements is that the scan does not affect legitimate clients' usage of...

Which of the following OSSTM testing methodologies should be used to test under the worst conditions?

Penetration on an assessment for a client organization, a penetration tester notices numerous outdated software package versions were installed ...s-critical servers. Which of the...

A penetration tester managed to exploit a vulnerability using the following payload: IF (1=1) WAIT FOR DELAY '0:0:15' Which of the following actions would best mitigate this type o...

Which of the following is the most important aspect to consider when calculating the price of a penetration test service for a client?

Which of the following should be included in scope documentation?

Given the following Nmap scan command: [root@kali ~]# nmap 192.168.0 .* -- exclude 192.168.0.101 Which of the following is the total number of servers that Nmap will attempt to sca...

A penetration tester is testing a company's public API and discovers that specific input allows the execution of arbitrary commands on the base operating system. Which of the follo...

A security firm is discussing the results of a penetration test with a client. Based on the findings, the client wants to focus the remaining time on a critical network segment. Wh...

A client asks a penetration tester to retest its network a week after the scheduled maintenance window. Which of the following is the client attempting to do?

A penetration tester fuzzes an internal server looking for hidden services and applications and obtains the following output: Which of the following is the most likely explanation...

Which of the following assessment methods is the most likely to cause harm to an ICS environment?

A penetration tester runs the following command: nmap -p- -A 10.0.1.10 Given the execution of this command, which of the following quantities of ports will Nmap scan?

A penetration tester wants to find the password for any account in the domain without locking any of the accounts. Which of the following commands should the tester use?

Given the following code: Which of the following tasks could be accomplished with the script?

A penetration tester is enumerating shares and receives the following output: Which of the following should the penetration tester enumerate next?

During a test of a custom-built web application, a penetration tester identifies several vulnerabilities. Which of the following would be the most interested in the steps to reprod...

An external consulting firm is hired to perform a penetration test and must keep the confidentiality of the security vulnerabilities and the private data found in a customer's syst...

A penetration tester is conducting an Nmap scan and wants to scan for ports without establishing a connection. The tester also wants to find version data information for services r...

A company developed a new web application to allow its customers to submit loan applications. A penetration tester is reviewing the application and discovers that the application w...

As part of an active reconnaissance, a penetration tester intercepts and analyzes network traffic, including API requests and responses. Which of the following can be gained by cap...

A penetration tester breaks into a company's office building and discovers the company does not have a shredding service. Which of the following attacks should the penetration test...

An organization wants to identify whether a less secure protocol is being utilized on a wireless network. Which of the following types of attacks will achieve this goal?

Which of the following tools would help a penetration tester locate a file that was uploaded to a content management system?

Which of the following members of a client organization are most likely authorized to provide a signed authorization letter prior to the start date of a penetration test?

Which of the following describes a globally accessible knowledge base of adversary tactics and techniques based on real-world observations?

Company.com has hired a penetration tester to conduct a phishing test. The tester wants to set up a fake log-in page and harvest credentials when target employees click on links in...

A penetration tester discovered a code repository and noticed passwords were hashed before they were stored in the database with the following code: salt = 'saltl23' hash = hashlib...

A penetration tester is taking screen captures of hashes obtained from a domain controller. Which of the following best explains why the penetration tester should immediately obscu...

Which of the following types of information would most likely be included in an application security assessment report addressed to developers? (Select two).

A potential reason for communicating with the client point of contact during a penetration test is to provide resolution if a testing component crashes a system or service and leav...

A penetration tester was hired to test Wi-Fi equipment. Which of the following tools should be used to gather information about the wireless network?

A penetration tester is looking for a particular type of service and obtains the output below: Which of the following commands was executed by the tester?

Which of the following is the most common vulnerability associated with loT devices that are directly connected to the internet?

A penetration tester issues the following command after obtaining a low-privilege reverse shell: wmic service get name,pathname,startmode Which of the following is the most likely...

Which of the following tools can a penetration tester use to brute force a user password over SSH using multiple threads?

Which of the following tools would be best to use to conceal data in various kinds of image files?

A penetration tester is working to enumerate the PLC devices on the 10.88.88.76/24 network. Which of the following commands should the tester use to achieve the objective in a way...

A penetration testing firm performs an assessment every six months for the same customer. While performing network scanning for the latest assessment, the penetration tester observ...