Question 71
PT0-003 Practice Test
PT0-003 Practice Test practice questions, page 15 of 15, with answer review and explanations.
Question 72
SIMULATION - A penetration tester is using a test account within an application to discover any vulnerabilities within the change email function. During testing, the penetration tester discovers the application is vulnerable to an attack that would allow for the tester to change a user’s email address wile logged in. The user's account would be disabled after three unsuccessful login attempts. INSTRUCTIONS - Part 1 - Examine the two HTTP requests in which the penetration tester was successful in changing the test email address within the application and identify the type of attack that has most likely exploited the vulnerability. Part 2 - Use the drop-down menus to select elements to represent the malicious HTTP request that will accomplish the desired exploit. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Question 73
SIMULATION - A previous penetration test report identified a host with vulnerabilities that was successfully exploited. Management has requested that an internal member of the security team reassess the host to determine if the vulnerability still exists. INSTRUCTIONS - Part 1: • Analyze the output and select the command to exploit the vulnerable service. Part 2: • Click on each command to view its output. • Select the appropriate set of commands to escalate privileges. • Identify which remediation steps should be taken. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Question 74