PT0-001

PT0-001 practice questions, page 7 of 8, with answer review and explanations.

Question 31

Consumer-based IoT devices are often less secure than systems built for traditional desktop computers. Which of the following BEST describes the reasoning for this?

  1. Manufacturers developing IoT devices are less concerned with security.
  2. It is difficult for administrators to implement the same security standards across the board.
  3. IoT systems often lack the hardware power required by more secure solutions.
  4. Regulatory authorities often have lower security requirements for IoT systems.

Question 32

Which of the following commands starts the Metasploit database?

  1. msfconsole
  2. workspace
  3. msfvenom
  4. db_init
  5. db_connect

Question 33

A company requested a penetration tester review the security of an in-house developed Android application. The penetration tester received an APK file to support the assessment. The penetration tester wants to run SAST on the APK file. Which of the following preparatory steps must the penetration tester do FIRST? (Select TWO).

  1. Convert to JAR.
  2. Decompile.
  3. Cross-compile the application.
  4. Convert JAR files to DEX.
  5. Re-sign the APK.
  6. Attach to ADB.

Question 34

A penetration tester identifies the following findings during an external vulnerability scan: Which of the following attack strategies should be prioritized from the scan results above?

  1. Obsolete software may contain exploitable components.
  2. Weak password management practices may be employed.
  3. Cryptographically weak protocols may be intercepted.
  4. Web server configurations may reveal sensitive information.

Question 35

A penetration tester is in the process of writing a report that outlines the overall level of risk to operations. In which of the following areas of the report should the penetration tester put this?

  1. Appendices
  2. Executive summary
  3. Technical summary
  4. Main body