Online Access Free PT0-002 Practice Test

User credentials were captured from a database during an assessment and cracked using rainbow tables. Based on the ease of compromise, which of the following algorithms was MOST likely used to store the passwords in the database?

• A.SHA-1
• B.PBKDF2
• C.bcrypt
• D.MD5

A penetration tester discovered a code repository and noticed passwords were hashed before they were stored in the database with the following code? salt = '123' hash = hashlib.pbkdf2_hmac('sha256', plaintext, salt, 10000) The tester recommended the code be updated to the following salt = os.urandom(32) hash = hashlib.pbkdf2_hmac('sha256', plaintext, salt, 10000) Which of the following steps should the penetration tester recommend?

• A.Replacing the SHA-256 algorithm to something more secure
• B.Changing passwords that were created before this code update
• C.Keeping hashes created by both methods for compatibility
• D.Rehashing all old passwords with the new code

A security analyst is conducting an unknown environment test from 192.168.3.3. The analyst wants to limit observation of the penetration tester's activities and lower the probability of detection by intrusion protection and detection systems. Which of the following Nmap commands should the analyst use to achieve this objective?

• A.nmap -scanflags SYNFIN 192.168.5.5
• B.nmap -D 10.5.2.2 192.168.5.5
• C.nmap -datalength 2 192.168.5.5
• D.nmap -F 192.168.5.5

The output from a penetration testing tool shows 100 hosts contained findings due to improper patch management. Which of the following did the penetration tester perform?

• A.A packet capture
• B.An Nmap scan
• C.A vulnerability scan
• D.A WHOIS lookup

A security engineer identified a new server on the network and wants to scan the host to determine if it is running an approved version of Linux and a patched version of Apache. Which of the following commands will accomplish this task?

• A.nmap -sS -sL -p80 192.168.1.20
• B.nmap -O -v -p80 192.168.1.20
• C.nmap -A -T4 -p80 192.168.1.20
• D.nmap -f -sV -p80 192.168.1.20