PT0-003 Practice Test

PT0-003 Practice Test practice questions, page 4 of 14, with answer review and explanations.

Question 16

A penetration tester is unable to identify the Wi-Fi SSID on a client's cell phone. Which of the following techniques would be most effective to troubleshoot this issue?

  1. Sidecar scanning
  2. Channel scanning
  3. Stealth scanning
  4. Static analysis scanning

Question 17

During a web application assessment, a penetration tester identifies an input field that allows JavaScript injection. The tester inserts a line of JavaScript that results in a prompt, presenting a text box when browsing to the page going forward. Which of the following types of attacks is this an example of?

  1. SQL injection
  2. SSRF
  3. XSS
  4. Server-side template injection

Question 18

A penetration tester attempts unauthorized entry to the company’s server room as part of a security assessment. Which of the following is the best technique to manipulate the lock pins and open the door without the original key?

  1. Plug spinner
  2. Bypassing
  3. Decoding
  4. Raking

Question 19

Which of the following technologies is most likely used with badge cloning? (Choose two.)

  1. NFC
  2. RFID
  3. Bluetooth
  4. Modbus
  5. Zigbee
  6. CAN bus

Question 20

During a penetration test of a web application, the tester gains full access to the application's source code. The application repository includes thousands of code files. Given that the assessment timeline is very short, which of the following approaches would allow the tester to identify hard-coded credentials most effectively?

  1. Run TruffleHog against a local clone of the application.
  2. Scan the live web application using Nikto.
  3. Perform a manual code review of the Git repository.
  4. Use SCA software to scan the application source code.