PT0-003 Practice Test

PT0-003 Practice Test practice questions, page 9 of 14, with answer review and explanations.

Question 41

A client warns the assessment team that an ICS application is maintained by the manufacturer. Any tampering of the host could void the enterprise support terms of use. Which of the following techniques would be most effective to validate whether the application encrypts communications in transit?

  1. Utilizing port mirroring on a firewall appliance
  2. Installing packet capture software on the server
  3. Reconfiguring the application to use a proxy
  4. Requesting that certificate pinning be disabled

Question 42

While performing a penetration testing exercise, a tester executes the following command: PS c:\tools> c:\hacks\PsExec.exe \\server01.comptia.org -accepteula cmd.exe Which of the following best explains what the tester is trying to do?

  1. Test connectivity using PSExec on the server01 using CMD.exe.
  2. Perform a lateral movement attack using PsExec.
  3. Send the PsExec binary file to the server01 using CMD.exe.
  4. Enable CMD.exe on the server01 through PsExec.

Question 43

During an assessment, a penetration tester obtains a low-privilege shell and then runs the following command: findstr /SIM /C:"pass” *.txt *.cfg *.xml Which of the following is the penetration tester trying to enumerate?

  1. Configuration files
  2. Permissions
  3. Virtual hosts
  4. Secrets

Question 44

A penetration tester finished a security scan and uncovered numerous vulnerabilities on several hosts. Based on the targets' EPSS and CVSS scores, which of the following targets is the most likely to get attacked?

  1. Target 1: EPSS Score = 0.6 and CVSS Score = 4
  2. Target 2: EPSS Score = 0.3 and CVSS Score = 2
  3. Target 3: EPSS Score = 0.6 and CVSS Score = 1
  4. Target 4: EPSS Score = 0.4 and CVSS Score = 4.5

Question 45

During a discussion of a penetration test final report, the consultant shows the following payload used to attack a system: ?/ aLeRt("pwned") Based on the code, which of the following options represents the attack executed by the tester and the associated countermeasure?

  1. Arbitrary code execution; the affected computer should be placed on a perimeter network
  2. SQL injection attack; should be detected and prevented by a web application firewall
  3. Cross-site request forgery; should be detected and prevented by a firewall
  4. XSS obfuscated; should be prevented by input sanitization