Online Access Free PT0-002 Practice Test

A company conducted a simulated phishing attack by sending its employees emails that included a link to a site that mimicked the corporate SSO portal. Eighty percent of the employees who received the email clicked the link and provided their corporate credentials on the fake site. Which of the following recommendations would BEST address this situation?

• A.Restrict employees from web navigation by defining a list of unapproved sites in the corporate proxy.
• B.Implement an email security gateway to block spam and malware from email communications.
• C.Implement multifactor authentication on all corporate applications.
• D.Implement a recurring cybersecurity awareness education program for all users.

A penetration tester enters a command into the shell and receives the following output:
C:\Users\UserX\Desktop>vmic service get name, pathname, displayname, startmode | findstr /i auto | findstr /i /v |C:\\Windows\\" I findstr /i /v""
VulnerableService Some Vulnerable Service C:\Program Files\A Subfolder\B Subfolder\SomeExecutable.exe Automatic
Which of the following types of vulnerabilities does this system contain?

• A.Clear text credentials
• B.Writable services
• C.Insecure file/folder permissions
• D.Unquoted service path

During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan.
INSTRUCTIONS
Analyze the code segments to determine which sections are needed to complete a port scanning script.
Drag the appropriate elements into the correct locations to complete the script.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Correct Answer:

During a web application test, a penetration tester was able to navigate to https://company.com and view all links on the web page. After manually reviewing the pages, the tester used a web scanner to automate the search for vulnerabilities. When returning to the web application, the following message appeared in the browser: unauthorized to view this page. Which of the following BEST explains what occurred?

• A.The web page was not found.
• B.The SSL certificates were invalid.
• C.The tester IP was blocked.
• D.The scanner crashed the system.

During an assessment, a penetration tester was able to access the organization's wireless network from outside of the building using a laptop running Aircrack-ng. Which of the following should be recommended to the client to remediate this issue?

• A.Using WEP encryption
• B.Changing to Wi-Fi equipment that supports strong encryption
• C.Using directional antennae
• D.Disabling Wi-Fi