PT0-003 — questions

A penetration tester is assessing the security of a web application. When the tester attempts to access the application, the tester receives an HTTP 403 response. Which of the following should the penetration tester do to overcome this issue?

During a penetration test, the tester configures a backdoor to maintain access to a compromised system. In addition, the tester keeps a time card on the desktop of the compromised host. Which of the following is the most important activity for the tester to perform after the engagement concludes?

A penetration tester wants to bypass multifactor authentication by intercepting traffic between the client and a web server. Which of the following is the most appropriate tool for this task?

A penetration tester wants to perform static analysis of Android Package Kits. Which of the following is one step the penetration tester must take to enable this type of analysis?

A penetration tester creates a Netcat listener on a compromised server. The tester wants to establish persistence in case the server is restarted. Which of the following will best achieve this goal?

A customer permits connections from inside its network to all IPs that belong to a publicly available cloud-hosting company. Which of the following unauthorized occurrence is most likely based on this description?

Which of the following authorizations is mandatory when a penetration tester is involved in a complex IT infrastructure?

A penetration tester uses a reverse shell to maintain connectivity to a target network. During the final phase of the exercise, the penetration tester removes the reverse shell. Which of the following is an example of these activities?

Due to a few recent unsolved break-ins, an organization hires a physical penetration tester to check internal and external areas for weaknesses. The organization's security officers receive some door and badge reader alerts during the testing window but cannot identify the cause. The tester's findings include the following: Which of the following should the tester recommend? (Choose two.)

The following table shows the findings of an application security penetration test: Which of the following recommendations should the penetration tester make? (Choose two.)

During a penetration test, the tester configures a sniffing system to capture network traffic. While reviewing the results of the sniffing tool’s output, the tester discovers the following protocols: • FTP • MODBUS • DNS • SSH Based on these protocols, which of the following steps should the tester complete next?

A penetration tester is performing a wireless assessment that is focused on accessing sensitive information. Which of the following is the best way for the tester to accomplish this task from a nearby coffee shop?

A penetration tester establishes an initial reverse shell in the perimeter network on a Linux-based host. The tester finds a NetworkService credential that is suitable for reuse and needs to pivot. Which of the following is the best way to accomplish the task?

A penetration tester performs an assessment for a company that uses several different office buildings throughout a downtown area. Which of the following techniques is the most effective way to identify the location of a designated target?

During a penetration test, the tester executes the following command: C:\> setspn -q */* The tester receives the following output: Which of the following attacks is the tester most likely trying to perform?

A penetration tester must use a staging environment to identify vulnerabilities in a live web application. The tester needs to detect whether the application is vulnerable to SQL injection and cross-site scripting flaws by using custom payloads. Which of the following vulnerability discovery techniques should the tester use?

A penetration tester conducts reconnaissance and looks for ways to obtain administrator emails to use in a phishing campaign. Which of the following tools should the penetration tester use?

A penetration tester gains access to a Linux system and creates the following script: Which of the following is the objective of this script?

Given the following output snippet that was generated during the reconnaissance phase of a penetration test: Which of the following line numbers represent the most likely vulnerability to be used by the penetration tester? (Choose two.)

A penetration tester identifies indicators that company employees might be using company product names in their passwords. Which of the following tools should the tester use to create the best word list for a further attack phase?