PT0-001

PT0-001 practice questions, page 3 of 8, with answer review and explanations.

Question 11

Which of the following is the reason why a penetration tester would run the chkconfig --del servicename command at the end of an engagement?

  1. To remove the persistence
  2. To enable persistence
  3. To report persistence
  4. To check for persistence

Question 12

A penetration tester wants to target NETBIOS name service. Which of the following is the MOST likely command to exploit the NETBIOS name service?

  1. arpspoof
  2. nmap
  3. responder
  4. burpsuite

Question 13

A security consultant receives a document outlining the scope of an upcoming penetration test. This document contains IP addresses and times that each can be scanned. Which of the following would contain this information?

  1. Rules of engagement
  2. Request for proposal
  3. Master service agreement
  4. Business impact analysis

Question 14

A penetration tester executes the following commands: Which of the following is a local host vulnerability that the attacker is exploiting?

  1. Insecure file permissions
  2. Application whitelisting
  3. Shell escape
  4. Writable service

Question 15

A penetration tester reviews the scan results of a web application. Which of the following vulnerabilities is MOST critical and should be prioritized for exploitation?

  1. Stored XSS
  2. Fill path disclosure
  3. Expired certificate
  4. Clickjacking