PT0-002 practice questions, page 16 of 22, with answer review and explanations.
Question 76
Which of the following situations would MOST likely warrant revalidation of a previous security assessment?
After detection of a breach
After a merger or an acquisition
When an organization updates its network firewall configurations
When most of the vulnerabilities have been remediated
Question 77
A penetration tester gains access to a system and is able to migrate to a user process: Given the output above, which of the following actions is the penetration tester performing? (Choose two.)
Redirecting output from a file to a remote system
Building a scheduled task for execution
Mapping a share to a remote system
Executing a file on the remote system
Creating a new process on all domain systems
Setting up a reverse shell from a remote system
Adding an additional IP address on the compromised system
Question 78
After gaining access to a previous system, a penetration tester runs an Nmap scan against a network with the following results: The tester then runs the following command from the previous exploited system, which fails: Which of the following explains the reason why the command failed?
The tester input the incorrect IP address.
The command requires the ג€"port 135 option.
An account for RDP does not exist on the server.
PowerShell requires administrative privilege.
Question 79
Which of the following assessment methods is MOST likely to cause harm to an ICS environment?
Active scanning
Ping sweep
Protocol reversing
Packet analysis
Question 80
During a penetration test, a tester is in close proximity to a corporate mobile device belonging to a network administrator that is broadcasting Bluetooth frames. Which of the following is an example of a Bluesnarfing attack that the penetration tester can perform?
Sniff and then crack the WPS PIN on an associated WiFi device.