Online Access Free PT0-001 Practice Test

A penetration tester is performing an annual security assessment for a repeat client The tester finds indicators of previous compromise Which of the following would be the most logical steps to follow NEXT?

• A.Make note of the anomaly, continue with the penetration testing and detail it in the final report
• B.Report the incident to the client's legal department and then follow up with the client's security operations team
• C.Report the incident to the clients Chief Information Security Officer (CISO) immediately and alter the terms of engagement accordingly
• D.Report the incident to the tester's immediate manager and follow up with the client immediately

A penetration tester is performing ARP spoofing against a switch. Which of the following should the penetration tester spoof to get the MOST information?

• A.MAC address of the client
• B.MAC address of the gateway
• C.MAC address of the domain controller
• D.MAC address of the web server

A client has requested an external network penetration test for compliance purposes. During discussion between the client and the penetration tester, the client expresses unwillingness to add the penetration tester's source IP addresses to the client's IPS whitelist for the duration of the test. Which of the following is the BEST argument as to why the penetration tester's source IP addresses should be whitelisted?

• A.IPS whitelisting rules require frequent updates to stay current, constantly developing vulnerabilities and newly discovered weaknesses.
• B.Whitelisting prevents a possible inadvertent DoS attack against the IPS and supporting log-monitoring systems.
• C.Testing should focus on the discovery of possible security issues across all in-scope systems, not on determining the relative effectiveness of active defenses such as an IPS.
• D.Penetration testing of third-party IPS systems often requires additional documentation and authorizations; potentially delaying the time-sensitive test.

A penetration tester is exploiting the use of default public and private community strings Which of the following protocols is being exploited?

• A.SMTP
• B.DNS
• C.HTTP
• D.SNMP

Which of the following can be used to perform online password attacks against RDP?

• A.Hashcat
• B.John the Rippef
• C.Ncrack
• D.Aircrack-ng