PT0-003 Practice Test

PT0-003 Practice Test practice questions, page 7 of 14, with answer review and explanations.

Question 31

A penetration tester attempts to run an automated web-application scanner against a target URL. The tester validates that the web page is accessible from a different device. The tester analyzes the following HTTP request header logging output: Which of the following actions should the tester take to get the scans to work properly?

  1. Modify the scanner to slow down the scan.
  2. Change the source IP with a VPN.
  3. Modify the scanner to only use HTTP GET requests.
  4. Modify the scanner user agent.

Question 32

During an assessment, a penetration tester runs the following command: setspn.exe -Q */* Which of the following attacks is the penetration tester preparing for?

  1. LDAP injection
  2. Pass-the-hash
  3. Kerberoasting
  4. Dictionary

Question 33

While conducting an assessment, a penetration tester identifies the details for several unreleased products announced at a company-wide meeting. Which of the following attacks did the tester most likely use to discover this information?

  1. Eavesdropping
  2. Bluesnarfing
  3. Credential harvesting
  4. SQL injection attack

Question 34

A penetration tester wants to attack a server, exhausting its resources and making it unavailable to legitimate users. Which of the following attacks would be best to achieve this result?

  1. IP spoofing
  2. TCP hijacking
  3. Port redirection
  4. SYN flooding

Question 35

During an internal penetration test, a tester compromises a Windows OS-based endpoint and bypasses the defensive mechanism on that system. The tester also discovers the endpoint is part of an Active Directory local domain. The tester’s main goal is to leverage credentials to authenticate into other systems within the Active Directory environment. Which of the following steps should the tester take to complete the goal?

  1. Use Mimikatz to collect information about the accounts and try to authenticate in other systems.
  2. Use hasheat to crack a password for the local user on the compromised endpoint.
  3. Use Evil-WinRM to access other systems in the network within the endpoint credentials.
  4. Use Metasploit to create and execute a payload and try to upload the payload into other systems.