PT0-001

PT0-001 practice questions, page 4 of 8, with answer review and explanations.

Question 16

A penetration tester observes that several high-numbered ports are listening on a public web server. However, the system owner says the application only uses port 443. Which of the following would be BEST to recommend?

  1. Transition the application to another port.
  2. Filter port 443 to specific IP addresses.
  3. Implement a web application firewall.
  4. Disable unneeded services.

Question 17

A penetration tester was able to enter an SQL injection command into a text box and gain access to the information store on the database. Which of the following is the BEST recommendation that would mitigate the vulnerability?

  1. Randomize the credentials used to log in.
  2. Install host-based intrusion detection.
  3. Implement input normalization.
  4. Perform system hardening.

Question 18

Black box penetration testing strategy provides the tester with:

  1. a target list
  2. a network diagram
  3. source code
  4. privileged credentials

Question 19

Which of the following tools would a penetration tester leverage to conduct OSINT? (Select TWO).

  1. Shodan
  2. SET
  3. BeEF
  4. Wireshark
  5. Maltego
  6. Dynamo

Question 20

A penetration tester is performing ARP spoofing against a switch. Which of the following should the penetration tester spoof to get the MOST information?

  1. MAC address of the client
  2. MAC address of the domain controller
  3. MAC address of the web server
  4. MAC address of the gateway