PenTest+ PT0-002 Reddit Questions

Page: 12 / 29

Question 48

The results of an Nmap scan are as follows:

Which of the following would be the BEST conclusion about this device?

Options:

This device may be vulnerable to the Heartbleed bug due to the way transactions over TCP/22 handle heartbeat extension packets, allowing attackers to obtain sensitive information from process memory.

This device is most likely a gateway with in-band management services.

This device is most likely a proxy server forwarding requests over TCP/443.

This device may be vulnerable to remote code execution because of a butter overflow vulnerability in the method used to extract DNS names from packets prior to DNSSEC validation.

Question 49

A new client hired a penetration-testing company for a month-long contract for various security assessments against the client’s new service. The client is expecting to make the new service publicly available shortly after the assessment is complete and is planning to fix any findings, except for critical issues, after the service is made public. The client wants a simple report structure and does not want to receive daily findings.

Which of the following is most important for the penetration tester to define FIRST?

Options:

Establish the format required by the client.

Establish the threshold of risk to escalate to the client immediately.

Establish the method of potential false positives.

Establish the preferred day of the week for reporting.

Question 50

Which of the following describes the reason why a penetration tester would run the command sdelete mimikatz. * on a Windows server that the tester compromised?

Options:

To remove hash-cracking registry entries

To remove the tester-created Mimikatz account

To remove tools from the server

To remove a reverse shell from the system

Question 51

A penetration tester has been contracted to review wireless security. The tester has deployed a malicious wireless AP that mimics the configuration of the target enterprise WiFi. The penetration tester now wants to try to force nearby wireless stations to connect to the malicious AP. Which of the following steps should the tester take NEXT?