PT0-002

PT0-002 practice questions, page 8 of 22, with answer review and explanations.

Question 36

A penetration tester who is doing a security assessment discovers that a critical vulnerability is being actively exploited by cybercriminals. Which of the following should the tester do NEXT?

  1. Reach out to the primary point of contact.
  2. Try to take down the attackers.
  3. Call law enforcement officials immediately.
  4. Collect the proper evidence and add to the final report.

Question 37

A penetration tester received a .pcap file to look for credentials to use in an engagement. Which of the following tools should the tester utilize to open and read the .pcap file?

  1. Nmap
  2. Wireshark
  3. Metasploit
  4. Netcat

Question 38

A penetration tester ran an Nmap scan on an Internet-facing network device with the -F option and found a few open ports. To further enumerate, the tester ran another scan using the following command: nmap -O -A -sS -p- 100.100.100.50 Nmap returned that all 65,535 ports were filtered Which of the following MOST likely occurred on the second scan?

  1. A firewall or IPS blocked the scan.
  2. The penetration tester used unsupported flags.
  3. The edge network device was disconnected.
  4. The scan returned ICMP echo replies.

Question 39

A penetration tester is looking for a vulnerability that enables attackers to open doors via a specialized TCP service that is used for a physical access control system. The service exists on more than 100 different hosts, so the tester would like to automate the assessment. Identification requires the penetration tester to: ✑ Have a full TCP connection ✑ Send a `hello` payload ✑ Wait for a response ✑ Send a string of characters longer than 16 bytes Which of the following approaches would BEST support the objective?

  1. Run nmap -Pn -sV --script vuln <IP address>.
  2. Employ an OpenVAS simple scan against the TCP port of the host.
  3. Create a script in the Lua language and use it with NSE.
  4. Perform a credentialed scan with Nessus.

Question 40

Performing a penetration test against an environment with SCADA devices brings an additional safety risk because the:

  1. devices produce more heat and consume more power.
  2. devices are obsolete and are no longer available for replacement.
  3. protocols are more difficult to understand.
  4. devices may cause physical world effects.