Online Access Free PT0-002 Exam Questions

An Nmap scan of a network switch reveals the following:

Which of the following technical controls will most likely be the FIRST recommendation for this device?

• A.Network segmentation
• B.Encrypted passwords
• C.Multifactor authentication
• D.System-hardening techniques

Which of the following is the most secure method for sending the penetration test report to the client?

• A.Encrypting the penetration test report with the client's public key and sending it via email.
• B.Sending the penetration test report via webmail using an HTTPS connection.
• C.Sending the penetration test report inside a password-protected ZIP file.
• D.Sending the penetration test report on an online storage system.

Which of the following types of information should be included when writing the remediation section of a penetration test report to be viewed by the systems administrator and technical staff?

• A.The rules of engagement from the assessment
• B.The executive summary and information regarding the testing company
• C.A quick description of the vulnerability and a high-level control to fix it
• D.Information regarding the business impact if compromised

A penetration tester downloaded a Java application file from a compromised web server and identifies how to invoke it by looking at the following log:

Which of the following is the order of steps the penetration tester needs to follow to validate whether the Java application uses encryption over sockets?

• A.Run the application attached to a debugger and then review the application's log.
• B.Run an application vulnerability scan and then identify the TCP ports used by the application.
• C.Start a packet capture with Wireshark and then run the application.
• D.Disassemble the binary code and then identify the break points.

A penetration tester needs to access a building that is guarded by locked gates, a security team, and cameras.
Which of the following is a technique the tester can use to gain access to the IT framework without being detected?

• A.Impersonate a package delivery worker.
• B.Send a phishing email.
• C.Disable the cameras remotely.
• D.Pick a lock.