PT0-002

PT0-002 practice questions, page 21 of 22, with answer review and explanations.

Question 101

A penetration tester receives the following results from an Nmap scan: Which of the following OSs is the target MOST likely running?

  1. CentOS
  2. Arch Linux
  3. Windows Server
  4. Ubuntu

Question 102

A penetration tester would like to obtain FTP credentials by deploying a workstation as an on-path attack between the target and the server that has the FTP protocol. Which of the following methods would be the BEST to accomplish this objective?

  1. Wait for the next login and perform a downgrade attack on the server.
  2. Capture traffic using Wireshark.
  3. Perform a brute-force attack over the server.
  4. Use an FTP exploit against the server.

Question 103

Appending string values onto another string is called:

  1. compilation
  2. connection
  3. concatenation
  4. conjunction

Question 104

A consultant is reviewing the following output after reports of intermittent connectivity issues: Which of the following is MOST likely to be reported by the consultant?

  1. A device on the network has an IP address in the wrong subnet.
  2. A multicast session was initiated using the wrong multicast group.
  3. An ARP flooding attack is using the broadcast address to perform DDoS.
  4. A device on the network has poisoned the ARP cache.

Question 105

Which of the following web-application security risks are part of the OWASP Top 10 v2017? (Choose two.)

  1. Buffer overflows
  2. Cross-site scripting
  3. Race-condition attacks
  4. Zero-day attacks
  5. Injection flaws
  6. Ransomware attacks