PT0-002 Practice Test Questions Updated 460 Questions [Q43-Q59]

Q43. A penetration tester captured the following traffic during a web-application test:

Which of the following methods should the tester use to visualize the authorization information being transmitted?

Q44. You are a penetration tester reviewing a client’s website through a web browser.
INSTRUCTIONS
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate, source, or cookies.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Q45. A penetration tester attempted a DNS poisoning attack. After the attempt, no traffic was seen from the target machine. Which of the following MOST likely caused the attack to fail?

Q46. Which of the following identifies a condensed, high-level discussion of findings during a penetration test reporting activity?

Q47. A security company has been contracted to perform a scoped insider-threat assessment to try to gain access to the human resources server that houses PII and salary data. The penetration testers have been given an internal network starting position.
Which of the following actions, if performed, would be ethical within the scope of the assessment?

Q48. Which of the following is a rules engine for managing public cloud accounts and resources?

Q49. After compromising a system, a penetration tester wants more information in order to decide what actions to take next. The tester runs the following commands:

Which of the following attacks is the penetration tester most likely trying to perform?

Q50. During an engagement, a penetration tester was able to upload to a server a PHP file with the following content:
<? php system ($_POST[‘cmd’]) ?>
Which of the following commands should the penetration tester run to successfully achieve RCE?

Q51. Appending string values onto another string is called:

Q52. During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan.
INSTRUCTIONS
Analyze the code segments to determine which sections are needed to complete a port scanning script.
Drag the appropriate elements into the correct locations to complete the script.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Q53. A penetration tester learned that when users request password resets, help desk analysts change users’ passwords to 123change. The penetration tester decides to brute force an internet-facing webmail to check which users are still using the temporary password. The tester configures the brute-force tool to test usernames found on a text file and the… Which of the following techniques is the penetration tester using?

Q54. A penetration tester receives the following results from an Nmap scan:

Which of the following OSs is the target MOST likely running?

Q55. Which of the following is a ROE component that provides a penetration tester with guidance on who and how to contact the necessary individuals in the event of a disaster during an engagement?

Q56. A penetration tester utilized Nmap to scan host 64.13.134.52 and received the following results:

Based on the output, which of the following services are MOST likely to be exploited? (Choose two.)

Q57. An Nmap scan of a network switch reveals the following:

Which of the following technical controls will most likely be the FIRST recommendation for this device?

Q58. A penetration tester has obtained root access to a Linux-based file server and would like to maintain persistence after reboot. Which of the following techniques would BEST support this objective?

Q59. A penetration tester is testing a new API for the company’s existing services and is preparing the following script:

Which of the following would the test discover?