PT0-003 Practice Test

PT0-003 Practice Test practice questions, page 13 of 14, with answer review and explanations.

Question 61

A penetration tester is attempting to discover vulnerabilities in a company's web application. Which of the following tools would most likely assist with testing the security of the web application?

  1. OpenVAS
  2. Nessus
  3. sqlmap
  4. Nikto

Question 62

During a red-team exercise, a penetration tester obtains an employee's access badge. The tester uses the badge's information to create a duplicate for unauthorized entry. Which of the following best describes this action?

  1. Smurfing
  2. Credential stuffing
  3. RFID cloning
  4. Card skimming

Question 63

During an engagement, a penetration tester needs to break the key for the Wi-Fi network that uses WPA2 encryption. Which of the following attacks would accomplish this objective?

  1. ChopChop
  2. Replay
  3. Initialization vector
  4. KRACK

Question 64

A penetration tester is researching a path to escalate privileges. While enumerating current user privileges, the tester observes the following output: Which of the following privileges should the tester use to achieve the goal?

  1. SeImpersonatePrivilege
  2. SeCreateGlobalPrivilege
  3. SeChangeNotifyPrivilege
  4. SeManageVolumePrivilege

Question 65

During a routine penetration test, the client's security team observes logging alerts that indicate several ID badges were reprinted after working hours without the appropriate authorization. Which of the following is the penetration tester most likely trying to do?

  1. Obtain long-term, valid access to the facility.
  2. Disrupt the availabilty of facility access systems.
  3. Change access to the facility for valid users.
  4. Revoke access to the facility for valid users.