Question 1

A consultant is reviewing the following output after reports of intermittent connectivity issues:

? (192.168.1.1) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]

? (192.168.1.12) at 34:a4:be:09:44:f4 on en0 ifscope [ethernet]

? (192.168.1.17) at 92:60:29:12:ac:d2 on en0 ifscope [ethernet]

? (192.168.1.34) at 88:de:a9:12:ce:fb on en0 ifscope [ethernet]

? (192.168.1.136) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]

? (192.168.1.255) at ff:ff:ff:ff:ff:ff on en0 ifscope [ethernet]

? (224.0.0.251) at 01:02:5e:7f:ff:fa on en0 ifscope permanent [ethernet]

? (239.255.255.250) at ff:ff:ff:ff:ff:ff on en0 ifscope permanent [ethernet]

Which of the following is MOST likely to be reported by the consultant?

Options :

A : A device on the network has an IP address in the wrong subnet.

B :

A multicast session was initiated using the wrong multicast group.

C :

An ARP flooding attack is using the broadcast address to perform DDoS.

D :

A device on the network has poisoned the ARP cache.

Answer: B

Question 2

A penetration tester has been hired to configure and conduct authenticated scans of all the servers on a

software company’s network. Which of the following accounts should the tester use to return the MOST

results?

Options :

A : Root user

B : Local administrator

C :

Service

D : Network administrator

Answer: C

Question 3

A penetration tester runs the following command on a system:

find / -user root –perm -4000 –print 2>/dev/null

Which of the following is the tester trying to accomplish?

Options :

A : Set the SGID on all files in the / directory

B : Find the /root directory on the system

C :

Find files with the SUID bit set

D : Find files that were created during exploitation and move them to /dev/null

Answer: D

Question 4

A company recruited a penetration tester to configure wireless IDS over the network. Which of the following

tools would BEST test the effectiveness of the wireless IDS solutions?

Options :

A : Aircrack-ng

B : Wireshark

C : Wifite

D : Kismet

Answer: A

Question 5

A penetration tester is testing a web application that is hosted by a public cloud provider. The tester is able

to query the provider’s metadata and get the credentials used by the instance to authenticate itself. Which

of the following vulnerabilities has the tester exploited?

Options :

A : Cross-site request forgery

B : Server-side request forgery

C : Remote file inclusion

D : Local file inclusion

Answer: B

Smartly Prepare Exam with Free Online PT1-002 Practice Test

Buying Options: