PT0-001 Free Certification Exam Material from DumpStillValid with 250 Questions
Use Real PT0-001 - 100% Cover Real Exam Questions
NEW QUESTION 53
A security analyst has uncovered a suspicious request in the logs for a web application.
Given the following URL:
- A. Directory traversal
- B. User enumeration
- C. Remote file inclusion
- D. Cross-site scripting
Answer: B
NEW QUESTION 54
A penetration tester ran the following Nmap scan on a computer:
nmap -aV 192.168.1.5
The organization said it had disabled Telnet from its environment. However, the results of the Nmap scan show port 22 as closed and port 23 as open to SSH. Which of the following is the BEST explanation for what happened?
- A. Nmap results contain a false positive for port 23.
- B. The organization failed to disable Telnet.
- C. Port 22 was filtered.
- D. The service is running on a non-standard port.
Answer: B
NEW QUESTION 55
A penetration tester has a full shell to a domain controller and wants to discover any user account that has not authenticated to the domain in 21 days. Which of the following commands would BEST accomplish this?
- A. dsrm -users "DN=compony.com; OU=hq CN=usera"
- B. dsquery uaer -inactive 3
- C. dsquery -o -rein -limit 21
- D. dsuser -name -account -limit 3
Answer: B
NEW QUESTION 56
A penetration tester is performing ARP spoofing against a switch. Which of the following should the penetration tester spoof to get the MOST information?
- A. MAC address of the client
- B. MAC address of the gateway
- C. MAC address of the web server
- D. MAC address of the domain controller
Answer: B
NEW QUESTION 57
A penetration tester wants to launch a graphic console window from a remotely compromised host with IP 10.0.0.20 and display the terminal on the local computer with IP
192.168.1.10. Which of the following would accomplish this task?
- A. From the local computer, run the following command
ssh -L4444 : 127.0.01:6000 -% [email protected] xterm - B. From the local computer, run the following command
Nc -1 -p 6000
Then, from the remote computer, run the following command
Xterm | nc 192.168.1.10 6000 - C. From the remote computer, run the following commands:
Export IHOST 192.168.1.10:0.0
xhost+
Terminal - D. From the local computer, run the following command
ssh -r6000 : 127.0.01:4444 -p 6000 [email protected] "xhost+; xterm"
Answer: C
NEW QUESTION 58
A penetration tester notices that the X-Frame-Options header on a web application is not set. Which of the following would a malicious actor do to exploit this configuration setting?
- A. Use path modification to escape the application's framework.
- B. Pass an iframe attribute that is malicious.
- C. Create a frame that overlays the application.
- D. Inject a malicious iframe containing JavaScript.
Answer: D
NEW QUESTION 59
A penetration tester identifies the following findings during an external vulnerability scan:
Which of the following attack strategies should be prioritized from the scan results above?
- A. Weak password management practices may be employed
- B. Cryptographically weak protocols may be intercepted
- C. Obsolete software may contain exploitable components
- D. Web server configurations may reveal sensitive information
Answer: B
NEW QUESTION 60
A penetration tester was able to retrieve the initial VPN user domain credentials by phishing a member of the IT department. Afterward, the penetration tester obtained hashes over the VPN and easily cracked them using a dictionary attack Which of the following remediation steps should be recommended? (Select THREE)
- A. Increase password complexity requirements
- B. Prevent members of the IT department from interactively logging in as administrators
- C. Implement two-factor authentication for remote access
- D. Install an intrusion prevention system
- E. Install a security information event monitoring solution.
- F. Upgrade the cipher suite used for the VPN solution
- G. Mandate all employees take security awareness training
Answer: A,C,G
NEW QUESTION 61
Consumer-based IoT devices are often less secure than systems built for traditional desktop computers.
Which of the following BEST describes the reasoning for this?
- A. It is difficult for administrators to implement the same security standards across the board.
- B. Manufacturers developing IoT devices are less concerned with security.
- C. Regulatory authorities often have lower security requirements for IoT systems.
- D. IoT systems often lack the hardware power required by more secure solutions.
Answer: B
NEW QUESTION 62
A client asks a penetration tester to add more addresses to a test currently in progress. Which of the following would defined the target list?
- A. Statement of work
- B. Rules of engagement
- C. Master services agreement
- D. End-user license agreement
Answer: A
NEW QUESTION 63
Performance based
You are a penetration Inter reviewing a client's website through a web browser.
Instructions:
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate source or cookies.
Answer:
Explanation:
Explanation
Step 1
Generate a Certificate Signing Request
Step 2
Submit CSR to the CA
Step 3
Installed re-issued certificate on the server
Step 4
Remove Certificate from Server
NEW QUESTION 64
An individual has been hired by an organization after passing a background check. The individual has been passing information to a competitor over a period of time.
Which of the following classifications BEST describes the individual?
- A. Insider threat
- B. Hacktivist
- C. Script kiddie
- D. APT
Answer: A
NEW QUESTION 65
A malicious user wants to perform an MITM attach on a computer. The computer network configuration is given below:
IP: 192.168.1.20
NETMASK: 255.255.255.0
DEFAULT GATEWAY: 192.168.1.254
DHCP: 192.168.1.253
DNS: 192.168.10.10, 192.168.20.10
Which of the following commands should the malicious user execute to perform the MITM attack?
- A. arpspoof -r -t 192 .168.1.253 192.168.1.20
- B. arpspoof -t 192.168.1.20 192.168.1.254
- C. arpspoof -c both -r -t 192.168.1.1 192.168.1.20
- D. arpspoof -c both -t 192.168.1.20 192.168.1.253
Answer: D
NEW QUESTION 66
During a physical security review, a detailed penetration testing report was obtained, which was issued to a security analyst and then discarded in the trash. The report contains validated critical risk exposures. Which of the following processes would BEST protect this information from being disclosed in the future?
- A. Restrict access to physical copies to authorized personnel only.
- B. Require only electronic copies of all documents to be maintained.
- C. Install surveillance cameras near all garbage disposal areas.
- D. Ensure corporate policies include guidance on the proper handling of sensitive information.
Answer: D
NEW QUESTION 67
A penetration tester is performing initial intelligence gathering on some remote hosts prior to conducting a vulnerability scan.
The tester runs the following command:
nmap -D 192.168.1.1, 192.168.1.2, 192.168.1.3 -sV -o --max-rate 2 192.168.1.130 Which of the following BEST describes why multiple IP addresses are specified?
- A. The network is subnetted as a/25 or greater, and the tester needed to access hosts on two different subnets.
- B. The tester is trying to perform a more stealthy scan by including several bogus addresses.
- C. The scanning machine has several interfaces to balance the scan request across at the specified rate.
- D. A discovery scan is run on the first set of addresses, whereas a deeper, more aggressive scan is run against the latter host.
Answer: B
NEW QUESTION 68
A penetration tester observes that the content security policy header is missing during a web application penetration test.
Which of the following techniques would the penetration tester MOST likely perform?
- A. Directory traversal attack
- B. Command injection attack
- C. Remote file inclusion attack
- D. Clickjacking attack
Answer: A
Explanation:
References: https://geekflare.com/http-header-implementation/
NEW QUESTION 69
A penetration tester wants to script out a way to discover all the RPTR records for a range of IP addresses.
Which of the following is the MOST efficient to utilize?
- A. for x in {1...254}; do dig -x 192.168.$x.$x; done
- B. nslookup -ns 8.8.8.8 << dnslist.txt
- C. dig -r > echo "8.8.8.8" >> /etc/resolv.conf
- D. nmap -p 53 -oG dnslist.txt | cut -d ":" -f 4
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 70
A client requests that a penetration tester emulate a help desk technician who was recently laid off. Which of the following BEST describes the abilities of the threat actor?
- A. Hacktivist
- B. Script kiddie
- C. Advanced persistent threat
- D. Organized crime
Answer: D
NEW QUESTION 71
A penetration tester ran the following Nmap scan on a computer
nmap -sV 192.168.1.5
The organization said it had disabled Telnet from its environment However, the results of the Nmap scan show port 22 as closed and port 23 as open to SSH Which of the following is the BEST explanation for what happened?
- A. Nmap results contain a false positive for port 23.
- B. The organization failed to disable Telnet.
- C. Port 22 was filtered.
- D. The service is running on a non-standard port.
Answer: B
NEW QUESTION 72
......
Dumps Brief Outline Of The PT0-001 Exam: https://www.dumpstillvalid.com/PT0-001-prep4sure-review.html
