QUESTION: 41

A penetration tester has been given an assignment to attack a series of targets in the 192.168.1.0/24 range, triggering as few alarms and countermeasures as possible.
Which of the following Nmap scan syntaxes would BEST accomplish this objective?

nmap -sT -vvv -O 192.168.1.2/24 -PO
nmap -sV 192.168.1.2/24 -PO
nmap -sA -v -O 192.168.1.2/24
nmap -sS -O 192.168.1.2/24 -T1

Answer(s): D

Reference:

https://nmap.org/book/man-port-scanning-techniques.html

Reveal Solution Next Question

QUESTION: 42

A penetration tester has gained access to a network device that has a previously unknown IP range on an interface. Further research determines this is an always-on VPN tunnel to a third-party supplier.
Which of the following is the BEST action for the penetration tester to take?

Utilize the tunnel as a means of pivoting to other internal devices.
Disregard the IP range, as it is out of scope.
Stop the assessment and inform the emergency contact.
Scan the IP range for additional systems to exploit.

Answer(s): C

Reveal Solution Next Question

QUESTION: 43

A penetration tester recently performed a social-engineering attack in which the tester found an employee of the target company at a local coffee shop and over time built a relationship with the employee. On the employee's birthday, the tester gave the employee an external hard drive as a gift.
Which of the following social-engineering attacks was the tester utilizing?

Phishing
Tailgating
Baiting
Shoulder surfing

Answer(s): C

Reference:

https://phoenixnap.com/blog/what-is-social-engineering-types-of-threats

Reveal Solution Next Question

QUESTION: 44

A security company has been contracted to perform a scoped insider-threat assessment to try to gain access to the human resources server that houses PII and salary data. The penetration testers have been given an internal network starting position.
Which of the following actions, if performed, would be ethical within the scope of the assessment?

Exploiting a configuration weakness in the SQL database
Intercepting outbound TLS traffic
Gaining access to hosts by injecting malware into the enterprise-wide update server
Leveraging a vulnerability on the internal CA to issue fraudulent client certificates
Establishing and maintaining persistence on the domain controller

Answer(s): A

Reveal Solution Next Question

Free PT0-002 Exam Braindumps (page: 11)

QUESTION: 41

Reference:

QUESTION: 42

QUESTION: 43

Reference:

QUESTION: 44