PT0-003 Practice Test

PT0-003 Practice Test practice questions, page 12 of 14, with answer review and explanations.

Question 56

Which of the following components should a penetration tester include in an assessment report?

  1. User activities
  2. Customer remediation plan
  3. Key management
  4. Attack narrative

Question 57

A penetration tester writes the following script to enumerate a /24 network: The tester executes the script, but it fails with the following error: -bash: syntax error near unexpected token ‘ping’ Which of the following should the tester do to fix the error?

  1. Add do after line 2.
  2. Replace {1..254} with $(seq 1 254).
  3. Replace bash with zsh.
  4. Replace $i with $[i].

Question 58

A penetration tester launches an attack against company employees. The tester clones the company's intranet log-in page and sends the link via email to all employees. Which of the following best describes the objective and tool selected by the tester to perform this activity?

  1. Gaining remote access using BeEF
  2. Obtaining the list of email addresses using theHarvester
  3. Harvesting credentials using SET
  4. Launching a phishing campaign using Gophish

Question 59

Which of the following techniques is the best way to avoid detection by data loss prevention tools?

  1. Encoding
  2. Compression
  3. Encryption
  4. Obfuscation

Question 60

During host discovery, a security analyst wants to obtain GeoIP information and a comprehensive summary of exposed services. Which of the following tools is best for this task?

  1. WiGLE.net
  2. WHOIS
  3. theHarvester
  4. Censys.io