Question 1

A penetration tester is designing a phishing campaign and wants to build list of users (or the target organization. Which of the following techniques would be the MOST appropriate? (Select TWO)

Options :

A : Query an Internet WHOIS database.

B : Search posted job listings.

C : Scrape the company website.

D : Harvest users from social networking sites.

E : Socially engineer the corporate call center.

Answer: C,D

Question 2

A penetration tester attempts to perform a UDP port scan against a remote target using an Nmap tool installed onto a non-Kali Linux image. For some reason, the UDP scan falls to start. Which of the following would MOST likely help to resolve the issue?

Options :

A : Install the latest version of the tool.

B : Review local iptables for existing drop rules.

C : Relaunch the tool with elevated privileges.

D : Enable both IPv4 and IPv6 forwarding.

Answer: D

Question 3

A penetration tester has discovered through automated scanning that a Tomcat server allows for the use of default credentials. Using default credentials, the tester is able to upload WAR files to the server.

Which of the following is the MOST likely post-exploitation step?

Options :

A : Upload a customized /etc/shadow file.

B : Monitor network traffic

C : Connect via SSH using default credentials.

D : Install web shell on the server.

Answer: D

Question 4

A penetration tester is performing an annual security assessment for a repeat client The tester finds indicators of previous compromise Which of the following would be the most logical steps to follow NEXT?

Options :

A : Report the incident to the tester-s immediate manager and follow up with the client immediately

B : Report the incident to the clients Chief Information Security Officer (CISO) immediately and alter the terms of engagement accordingly

C : Report the incident to the client-s legal department and then follow up with the client-s security operations team

D : Make note of the anomaly, continue with the penetration testing and detail it in the final report

Answer: A

Question 5

When considering threat actor scoping prior to an engagement, which of the following characteristics makes an APT challenging to emulate?

Options :

A : Development of custom zero-day exploits and tools

B : Leveraging the dark net for non-attribution

C : Tenacity and efficacy of social engineering attacks

D : Amount of bandwidth available for DoS attacks

Answer: C

Smartly Prepare Exam with Free Online PT0-001 Practice Test

Buying Options: