PT0-002 practice questions, page 20 of 22, with answer review and explanations.
Question 96
A final penetration test report has been submitted to the board for review and accepted. The report has three findings rated high. Which of the following should be the NEXT step?
Perform a new penetration test.
Remediate the findings.
Provide the list of common vulnerabilities and exposures.
Broaden the scope of the penetration test.
Question 97
Which of the following situations would require a penetration tester to notify the emergency contact for the engagement?
The team exploits a critical server within the organization.
The team exfiltrates PII or credit card data from the organization.
The team loses access to the network remotely.
The team discovers another actor on a system on the network.
Question 98
During an engagement, a penetration tester found the following list of strings inside a file: Which of the following is the BEST technique to determine the known plaintext of the strings?
Dictionary attack
Rainbow table attack
Brute-force attack
Credential-stuffing attack
Question 99
A penetration tester ran a simple Python-based scanner. The following is a snippet of the code: Which of the following BEST describes why this script triggered a `probable port scan` alert in the organization's IDS?
sock.settimeout(20) on line 7 caused each next socket to be created every 20 milliseconds.
*range(1, 1025) on line 1 populated the portList list in numerical order.
Line 6 uses socket.SOCK_STREAM instead of socket.SOCK_DGRAM
The remoteSvr variable has neither been type-hinted nor initialized.
Question 100
A penetration tester is conducting an authorized, physical penetration test to attempt to enter a client's building during non-business hours. Which of the following are MOST important for the penetration tester to have during the test? (Choose two.)