Question 1

A penetration tester has found indicators that a privileged user’s password might be the same on 30 different

Linux systems. Which of the following tools can help the tester identify the number of systems on which the

password can be used?

Options :

A : Hydra

B : John the Ripper

C : Cain and Abel

D : Medusa

Answer: A

Question 2

During a REST API security assessment, a penetration tester was able to sniff JSON content containing user credentials. The JSON structure was as follows: < transaction_id: "1234S6", content: [ { user_id: "mrcrowley", password: ["€54321#"] b < user_id: "ozzy", password: ["1112228"] ) ] Assuming that the variable json contains the parsed JSON data, which of the following Python code snippets correctly returns the password for the user ozzy?

Options :

A : json['content']['password'][1]

B : json['user_id']['password'][0][1]

C : json['content'][1]['password'][0]

D : json['content'][0]['password'][1]

Answer: C

Question 3

What Nmap command was used to generate this output? ``` Nmap scan report for rs3816.derp.pro 10.10.10.1 Host is up (0.00044s latency). Not shown: 999 filtered ports PORT STATE SERVICE VERSION 53/tcp open domain (generic dns response: NOTIMP) | fingerprint-strings: | DNSVersionBindReqTCP: | version |_ bind Service detection performed. Please report any incorrect results at https://nmap.org/submit ```

Options :

A : `nmap -sU 10.10.10.1`

B : `nmap -sCV 10.10.10.1`

C : `nmap -sT 10.10.10.1`

D : `nmap -sV 10.10.10.1`

Answer: B

Question 4

A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function. Which of the following OS or filesystem mechanisms is MOST likely to support this objective?

Options :

A : Alternate data streams

B : PowerShell modules

C : MP4 steganography

D : PsExec

Answer: A

Question 5

A client wants a security assessment company to perform a penetration test against its hot site. The purpose of the test is to determine the effectiveness of the defenses that protect against disruptions to business continuity. Which of the following is the MOST important action to take before starting this type of assessment?

Options :

A : Ensure the client has signed the SOW.

B : Verify the client has granted network access to the hot site.

C : Determine if the failover environment relies on resources not owned by the client.

D : Establish communication and escalation procedures with the client.

Answer: A

Smartly Prepare Exam with Free Online PT0-002 Practice Test

Buying Options: