PT0-002

PT0-002 practice questions, page 10 of 22, with answer review and explanations.

Question 46

Which of the following documents describes specific activities, deliverables, and schedules for a penetration tester?

  1. NDA
  2. MSA
  3. SOW
  4. MOU

Question 47

A penetration tester is exploring a client's website. The tester performs a curl command and obtains the following: Which of the following tools would be BEST for the penetration tester to use to explore this site further?

  1. Burp Suite
  2. DirBuster
  3. WPScan
  4. OWASP ZAP

Question 48

During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan. INSTRUCTIONS - Analyze the code segments to determine which sections are needed to complete a port scanning script. Drag the appropriate elements into the correct locations to complete the script. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. Select and Place:

Question 49

In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including full names, roles, and serial numbers. The tester realizes some of the passwords in the text file follow the format: . Which of the following would be the best action for the tester to take NEXT with this information?

  1. Create a custom password dictionary as preparation for password spray testing.
  2. Recommend using a password manager/vault instead of text files to store passwords securely.
  3. Recommend configuring password complexity rules in all the systems and applications.
  4. Document the unprotected file repository as a finding in the penetration-testing report.

Question 50

When developing a shell script intended for interpretation in Bash, the interpreter /bin/bash should be explicitly specified. Which of the following character combinations should be used on the first line of the script to accomplish this goal?

  1. <#
  2. <$
  3. ##
  4. #$
  5. #!