PT0-002

PT0-002 practice questions, page 3 of 22, with answer review and explanations.

Question 11

SIMULATION - You are a penetration tester reviewing a client's website through a web browser. INSTRUCTIONS - Review all components of the website through the browser to determine if vulnerabilities are present. Remediate ONLY the highest vulnerability from either the certificate, source, or cookies. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Question 12

A Chief Information Security Officer wants a penetration tester to evaluate the security awareness level of the company's employees. Which of the following tools can help the tester achieve this goal?

  1. Metasploit
  2. Hydra
  3. SET
  4. WPScan

Question 13

Which of the following is the MOST common vulnerability associated with IoT devices that are directly connected to the Internet?

  1. Unsupported operating systems
  2. Susceptibility to DDoS attacks
  3. Inability to network
  4. The existence of default passwords

Question 14

Which of the following describes the reason why a penetration tester would run the command sdelete mimikatz. * on a Windows server that the tester compromised?

  1. To remove hash-cracking registry entries
  2. To remove the tester-created Mimikatz account
  3. To remove tools from the server
  4. To remove a reverse shell from the system

Question 15

A penetration tester is scanning a corporate lab network for potentially vulnerable services. Which of the following Nmap commands will return vulnerable ports that might be interesting to a potential attacker?

  1. nmap 192.168.1.1-5 -PU22-25,80
  2. nmap 192.168.1.1-5 -PA22-25,80
  3. nmap 192.168.1.1-5 -PS22-25,80
  4. nmap 192.168.1.1-5 -Ss22-25,80