PT1-002 Practice Test

PT1-002 Practice Test practice questions, page 4 of 5, with answer review and explanations.

Question 16

A security professional wants to test an IoT device by sending an invalid packet to a proprietary service listening on TCP port 3011. Which of the following would allow the security professional to easily and programmatically manipulate the TCP header length and checksum using arbitrary numbers and to observe how the proprietary service responds?

  1. Nmap
  2. tcpdump
  3. Scapy
  4. hping3

Question 17

A penetration tester is reviewing the following SOW prior to engaging with a client: `Network diagrams, logical and physical asset inventory, and employees' names are to be treated as client confidential. Upon completion of the engagement, the penetration tester will submit findings to the client's Chief Information Security Officer (CISO) via encrypted protocols and subsequently dispose of all findings by erasing them in a secure manner.` Based on the information in the SOW, which of the following behaviors would be considered unethical? (Choose two.)

  1. Utilizing proprietary penetration-testing tools that are not available to the public or to the client for auditing and inspection
  2. Utilizing public-key cryptography to ensure findings are delivered to the CISO upon completion of the engagement
  3. Failing to share with the client critical vulnerabilities that exist within the client architecture to appease the client's senior leadership team
  4. Seeking help with the engagement in underground hacker forums by sharing the client's public IP address
  5. Using a software-based erase tool to wipe the client's findings from the penetration tester's laptop
  6. Retaining the SOW within the penetration tester's company for future use so the sales team can plan future engagements

Question 18

A company recruited a penetration tester to configure wireless IDS over the network. Which of the following tools would BEST test the effectiveness of the wireless IDS solutions?

  1. Aircrack-ng
  2. Wireshark
  3. Wifite
  4. Kismet

Question 19

A penetration tester gains access to a system and establishes persistence, and then runs the following commands: cat /dev/null > temp touch `"r .bash_history temp mv temp .bash_history Which of the following actions is the tester MOST likely performing?

  1. Redirecting Bash history to /dev/null
  2. Making a copy of the user's Bash history for further enumeration
  3. Covering tracks by clearing the Bash history
  4. Making decoy files on the system to confuse incident responders

Question 20

Which of the following web-application security risks are part of the OWASP Top 10 v2017? (Choose two.)

  1. Buffer overflows
  2. Cross-site scripting
  3. Race-condition attacks
  4. Zero-day attacks
  5. Injection flaws
  6. Ransomware attacks