PT0-002

PT0-002 practice questions, page 5 of 22, with answer review and explanations.

Question 21

A penetration tester completed a vulnerability scan against a web server and identified a single but severe vulnerability. Which of the following is the BEST way to ensure this is a true positive?

  1. Run another scanner to compare.
  2. Perform a manual test on the server.
  3. Check the results on the scanner.
  4. Look for the vulnerability online.

Question 22

A penetration tester has been given eight business hours to gain access to a client's financial system. Which of the following techniques will have the HIGHEST likelihood of success?

  1. Attempting to tailgate an employee who is going into the client's workplace
  2. Dropping a malicious USB key with the company's logo in the parking lot
  3. Using a brute-force attack against the external perimeter to gain a foothold
  4. Performing spear phishing against employees by posing as senior management

Question 23

A company's Chief Executive Officer has created a secondary home office and is concerned that the WiFi service being used is vulnerable to an attack. A penetration tester is hired to test the security of the WiFi's router. Which of the following is MOST vulnerable to a brute-force attack?

  1. WPS
  2. WPA2-EAP
  3. WPA-TKIP
  4. WPA2-PSK

Question 24

A penetration tester writes the following script: Which of the following objectives is the tester attempting to achieve?

  1. Determine active hosts on the network.
  2. Set the TTL of ping packets for stealth.
  3. Fill the ARP table of the networked devices.
  4. Scan the system on the most used ports.

Question 25

A penetration tester ran the following commands on a Windows server: Which of the following should the tester do AFTER delivering the final report?

  1. Delete the scheduled batch job.
  2. Close the reverse shell connection.
  3. Downgrade the svsaccount permissions.
  4. Remove the tester-created credentials.