PT0-002

PT0-002 practice questions, page 6 of 22, with answer review and explanations.

Question 26

A penetration tester has established an on-path attack position and must now specially craft a DNS query response to be sent back to a target host. Which of the following utilities would BEST support this objective?

  1. Socat
  2. tcpdump
  3. Scapy
  4. dig

Question 27

A penetration tester is starting an assessment but only has publicly available information about the target company. The client is aware of this exercise and is preparing for the test. Which of the following describes the scope of the assessment?

  1. Partially known environment testing
  2. Known environment testing
  3. Unknown environment testing
  4. Physical environment testing

Question 28

The following line-numbered Python code snippet is being used in reconnaissance: Which of the following line numbers from the script MOST likely contributed to the script triggering a `probable port scan` alert in the organization's IDS?

  1. Line 01
  2. Line 02
  3. Line 07
  4. Line 08
  5. Line 12

Question 29

A consulting company is completing the ROE during scoping. Which of the following should be included in the ROE?

  1. Cost of the assessment
  2. Report distribution
  3. Testing restrictions
  4. Liability

Question 30

A new client hired a penetration-testing company for a month-long contract for various security assessments against the client's new service. The client is expecting to make the new service publicly available shortly after the assessment is complete and is planning to fix any findings, except for critical issues, after the service is made public. The client wants a simple report structure and does not want to receive daily findings. Which of the following is most important for the penetration tester to define FIRST?

  1. Establish the format required by the client.
  2. Establish the threshold of risk to escalate to the client immediately.
  3. Establish the method of potential false positives.
  4. Establish the preferred day of the week for reporting.