PT0-002

PT0-002 practice questions, page 12 of 22, with answer review and explanations.

Question 56

SIMULATION - You are a penetration tester running port scans on a server. INSTRUCTIONS - Part 1: Given the output, construct the command that was used to generate this output from the available options. Part 2: Once the command is appropriately constructed, use the given output to identify the potential attack vectors that should be investigated further. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. Part 1 - Part 2 -

Question 57

Which of the following protocols or technologies would in-transit confidentially protection for emailing the final security assessment report?

  1. S/MIME
  2. FTPS
  3. DNSSEC
  4. AS2

Question 58

A penetration tester was able to gather MD5 hashes from a server and crack the hashes easily with rainbow tables. Which of the following should be included as a recommendation in the remediation report?

  1. Stronger algorithmic requirements
  2. Access controls on the server
  3. Encryption on the user passwords
  4. A patch management program

Question 59

A penetration tester found the following valid URL while doing a manual assessment of a web application: http://www.example.com/product.php?id=123987. Which of the following automated tools would be best to use NEXT to try to identify a vulnerability in this URL?

  1. SQLmap
  2. Nessus
  3. Nikto
  4. DirBuster

Question 60

A penetration tester is attempting to discover live hosts on a subnet quickly. Which of the following commands will perform a ping scan?

  1. nmap -sn 10.12.1.0/24
  2. nmap -sV -A 10.12.1.0/24
  3. nmap -Pn 10.12.1.0/24
  4. nmap -sT -p- 10.12.1.0/24