PT0-003 Practice Test

PT0-003 Practice Test practice questions, page 8 of 14, with answer review and explanations.

Question 36

A penetration tester is conducting a wireless security assessment for a client with 2.4GHz and 5GHz access points. The tester places a wireless USB dongle in the laptop to start capturing WPA2 handshakes. Which of the following steps should the tester take next?

  1. Enable monitoring mode using Aircrack-ng.
  2. Use Kismet to automatically place the wireless dongle in monitor mode and collect handshakes.
  3. Run KARMA to break the password.
  4. Research WIGLE.net for potential nearby client access points.

Question 37

A tester performs a vulnerability scan and identifies several outdated libraries used within the customer SaaS product offering. Which of the following types of scans did the tester use to identify the libraries?

  1. IAST
  2. SBOM
  3. DAST
  4. SAST

Question 38

A penetration tester reviews a SAST vulnerability scan report. The following vulnerability has been reported as high severity: The tester inspects the source file and finds the variable response is defined as a constant and is not referred to or used in other sections of the code. Which of the following describes how the tester should classify this reported vulnerability?

  1. False negative
  2. False positive
  3. True positive
  4. Low severity

Question 39

A penetration tester would like to leverage a CSRF vulnerability to gather sensitive details from an application's end users. Which of the following tools should the tester use for this task?

  1. Browser Exploitation Framework
  2. Maltego
  3. Metasploit
  4. theHarvester

Question 40

A penetration tester gains access to a Linux computer system. The tester then attempts to enumerate user accounts, including the directories and user default shell. Which of the following commands should the tester use to enumerate user accounts?

  1. cat /etc/shadow
  2. ls /var/usr
  3. ls /home
  4. cat /etc/passwd