PT0-003 — questions

A penetration tester compromises a developer's workstation and believes the individual may have access to Amazon cloud compute resources. Which of the following commands is least likely to trigger SOC detections to confirm access?

Testing and reporting activities are complete. A penetration tester needs to verify that exploited systems have been restored to preengagement conditions. Which of the following would be most appropriate for the tester to do?

A penetration tester conducts a web application assessment and receives the following Set-Cookie upon logging in: Set-Cookie auth=UGVudGVzdFVzZXI6OTE1MzYK Upon analysis, the penetration tester determines this is a Base64-encoded string, which when decoded reads: Pentestuser:91536 - The penetration tester logs out, logs back in, and sees the decoded string now reads: Pentestuser:91944 - Which of the following attacks will the penetration tester most likely conduct based on this information?

A penetration tester obtains initial access as a standard user on a server in an AD environment. This server is the only one in the environment where the account is logged in. The tester needs to obtain the credentials for this account to further the attack but cannot elevate on this server. Which of the following tools should the tester use to obtain the password?

During a red-team operation, a tester gains local administrator access to a Windows workstation. The tester's goal is to maintain long-term access without creating new services or modifying scheduled tasks because the blue team monitors both. The tester decides to automatically launch a payload upon each user login. Which of the following methods best supports this persistence goal?

A penetration tester conducts a web application test and wants to enumerate the file folder structure https://testsite.com. Which of the following is the correct command?

A penetration tester wants to collect a client's confidential information during an internal penetration test. Which of the following best meets the tester's objective?

A penetration tester reviews the TTL values obtained from different systems. Which of the following best explains what the penetration tester wants to accomplish?

A tester disables the C2 infrastructure, ensures all sessions are exited, and verifies that removal scripts were run. However, firewall logs still show a few hosts issue connectivity attempts every hour. Which of the following is the most likely reason for the continued connectivity attempts?

A penetration tester must obtain network credentials. The penetration tester has not previously accessed the systems. The target subnet within the network is mainly used by employee workstations for daily tasks. Which of the following actions will most likely achieve this goal?

A penetration tester obtains a copy of the file that contains password hashes of a Linux system. Which of the following toots should the penetration tester use first?

Which of the following is the best mechanism to covertly and quickly exfiltrate a large amount of data?

A penetration tester completes an assessment for a healthcare company. Several findings indicate the potential exposure of sensitive patient data. Which of the following steps must the penetration tester complete before dosing the engagement?

A tester infiltrates an internal network and wants to move laterally. The tester conducts host and service discovery and finds the following: • A number of internal web servers require user login (one HTTPS and five HTTP). • Two SQL servers are running PostgreSQL. • Two fileshare servers are running SMB 3. • There are multiple Windows and *NIX user endpoints. The tester has not found any usable credentials on the compromised machine. During preengagement activities, the tester teams that the client's password policy has the following requirements: • Passwords must have a minimum of 16 characters • Passwords must have both alphanumeric and special characters. Which of the following will best achieve the tester's objective?