PT0-002

PT0-002 practice questions, page 7 of 22, with answer review and explanations.

Question 31

A penetration tester logs in as a user in the cloud environment of a company. Which of the following Pacu modules will enable the tester to determine the level of access of the existing user?

  1. iam_enum_permissions
  2. iam_prive_sc_scan
  3. iam_backdoor_assume_role
  4. iam_bruteforce_permissions

Question 32

A company becomes concerned when the security alarms are triggered during a penetration test. Which of the following should the company do NEXT?

  1. Halt the penetration test.
  2. Conduct an incident response.
  3. Deconflict with the penetration tester.
  4. Assume the alert is from the penetration test.

Question 33

A penetration tester has been hired to perform a physical penetration test to gain access to a secure room within a client's building. Exterior reconnaissance identifies two entrances, a WiFi guest network, and multiple security cameras connected to the Internet. Which of the following tools or techniques would BEST support additional reconnaissance?

  1. Wardriving
  2. Shodan
  3. Recon-ng
  4. Aircrack-ng

Question 34

A red team gained access to the internal network of a client during an engagement and used the Responder tool to capture important data. Which of the following was captured by the testing team?

  1. Multiple handshakes
  2. IP addresses
  3. Encrypted file transfers
  4. User hashes sent over SMB

Question 35

A penetration tester conducts an Nmap scan against a target and receives the following results: Which of the following should the tester use to redirect the scanning tools using TCP port 1080 on the target?

  1. Nessus
  2. ProxyChains
  3. OWASP ZAP
  4. Empire