PT0-003 Practice Test

PT0-003 Practice Test practice questions, page 6 of 14, with answer review and explanations.

Question 26

A penetration tester has found a web application that is running on a cloud virtual machine instance. Vulnerability scans show a potential SSRF for the same application URL path with an injectable parameter. Which of the following commands should the tester run to successfully test for secrets exposure exploitabilty?

  1. curl <url>?param=http://169.254.169.254/latest/meta-data/
  2. curl '<url>?param=http://127.0.0.1/etc/passwd'
  3. curl '<url>?param=<script>alert(1}<script>/'
  4. curl <url>?param=http://127.0.0.1/

Question 27

A tester obtains access to an endpoint subnet and wants to move laterally in the network. Given the following output: Which of the following command and attack methods is the most appropriate for reducing the chances of being detected?

  1. responder -I eth0 -dwv ntlmrelayx.py -smb2support -tf <target>
  2. msf > use exploit/windows/smb/ms17_010_psexec msf > <set options> msf > run
  3. hydra -L administrator -P /path/topasswdlist smb: //<target>
  4. nmap --script smb-brute.nse -p 445 <target>

Question 28

A penetration tester is authorized to perform a DoS attack against a host on a network. Given the following input: Which of the following attack types is most likely being used in the test?

  1. MDK4
  2. Smurf attack
  3. FragAttack
  4. SYN flood

Question 29

Which of the following describes the process of determining why a vulnerability scanner is not providing results?

  1. Root cause analysis
  2. Secure distribution
  3. Peer review
  4. Goal reprioritization

Question 30

A penetration tester runs a vulnerability scan that identifies several issues across numerous customer hosts. The executive report outlines the following information: The client is concerned about the availabilty of its consumer-facing production application. Which of the following hosts should the penetration tester select for additional manual testing?

  1. Server 1
  2. Server 2
  3. Server 3
  4. Server 4