PT0-002 Exam Question 1

A company hired a penetration-testing team to review the cyber-physical systems in a manufacturing plant.
The team immediately discovered the supervisory systems and PLCs are both connected to the company intranet. Which of the following assumptions, if made by the penetration-testing team, is MOST likely to be valid?
  • PT0-002 Exam Question 2

    During an internal penetration test against a company, a penetration tester was able to navigate to another part of the network and locate a folder containing customer information such as addresses, phone numbers, and credit card numbers. To be PCI compliant, which of the following should the company have implemented to BEST protect this data?
  • PT0-002 Exam Question 3

    A penetration tester discovered a vulnerability that provides the ability to upload to a path via directory traversal. Some of the files that were discovered through this vulnerability are:

    Which of the following is the BEST method to help an attacker gain internal access to the affected machine?
  • PT0-002 Exam Question 4

    During an assessment, a penetration tester found a suspicious script that could indicate a prior compromise.
    While reading the script, the penetration tester noticed the following lines of code:

    Which of the following was the script author trying to do?
  • PT0-002 Exam Question 5

    A
    penetration tester found the following valid URL while doing a manual assessment of a web application:
    http://www.example.com/product.php?id=123987.
    Which of the following automated tools would be best to use NEXT to try to identify a vulnerability in this URL?