Online Access Free PT0-002 Exam Questions

Which of the following is the most secure way to protect a final report file when delivering the report to the client/customer?

• A.Asking for a PGP public key to encrypt the file
• B.Requiring FTPS security to download the file
• C.Creating a link on a cloud service and delivering it by email
• D.Copying the file on a USB drive and delivering it by postal mail

Which of the following provides a matrix of common tactics and techniques used by attackers along with recommended mitigations?

• A.NIST SP 800-53
• B.MITRE ATT&CK framework
• C.OWASP Top 10
• D.PTES technical guidelines

A penetration tester receives the following results from an Nmap scan:

Which of the following OSs is the target MOST likely running?

• A.Windows Server
• B.Ubuntu
• C.CentOS
• D.Arch Linux

A software company has hired a security consultant to assess the security of the company's software development practices. The consultant opts to begin reconnaissance by performing fuzzing on a software binary. Which of the following vulnerabilities is the security consultant MOST likely to identify?

• A.Credentials stored in strings
• B.Buffer overflows
• C.Weak authentication schemes
• D.Non-optimized resource management

Which of the following should a penetration tester consider FIRST when engaging in a penetration test in a cloud environment?

• A.Whether the specific cloud services are being used by the application
• B.Whether the country where the cloud service is based has any impeding laws
• C.Whether the cloud service provider allows the penetration tester to test the environment
• D.The geographical location where the cloud services are running