Online Access Free PT0-002 Practice Test

A penetration tester captured the following traffic during a web-application test:

Which of the following methods should the tester use to visualize the authorization information being transmitted?

• A.Decrypt the authorization header using AES.
• B.Decode the authorization header using UTF-8.
• C.Decode the authorization header using Base64.
• D.Decrypt the authorization header using bcrypt.

Appending string values onto another string is called:

• A.concatenation
• B.conjunction
• C.compilation
• D.connection

During a code review assessment, a penetration tester finds the following vulnerable code inside one of the web application files:
<% String id = request.getParameter("id"); %>
Employee ID: <%= id %>
Which of the following is the best remediation to prevent a vulnerability from being exploited, based on this code?

• A.Output encoding
• B.Patch application
• C.Parameterized queries

During an engagement, a penetration tester was able to upload to a server a PHP file with the following content:
<? php system ($_POST['cmd']) ?>
Which of the following commands should the penetration tester run to successfully achieve RCE?

• A.Option A
• B.Option C
• C.Option D
• D.Option B

Which of the following tools would be best suited to perform a cloud security assessment?

• A.Nmap
• B.Scout Suite
• C.Nessus
• D.ZAP
• E.OpenVAS