QUESTION: 165

A penetration tester has gained access to part of an internal network and wants to exploit on a different network segment. Using Scapy, the tester runs the following command:

Which of the following represents what the penetration tester is attempting to accomplish?

DNS cache poisoning
MAC spoofing
ARP poisoning
Double-tagging attack

Answer(s): D

Reveal Solution Next Question

QUESTION: 166

A company that requires minimal disruption to its daily activities needs a penetration tester to perform information gathering around the company's web presence.
Which of the following would the tester find MOST helpful in the initial information-gathering steps? (Choose two.)

MX records
Zone transfers
DNS forward and reverse lookups
Internet search engines
Externally facing open ports
Shodan results

Answer(s): D,F

Reveal Solution Next Question

QUESTION: 167

The attacking machine is on the same LAN segment as the target host during an internal penetration test. Which of the following commands will BEST enable the attacker to conduct host delivery and write the discovery to files without returning results of the attack machine?

nmap -sn -n -exclude 10.1.1.15 10.1.1.0/24 -oAtarget_txt
nmap -iR 10 -n -oX out.xml | grep "Nmap" | cut -d "" -f5 > live-hosts.txt
nmap -Pn -sV -O -iL target.txt -oAtarget_text_Service
nmap -sS -Pn -n -iL target.txt -oAtarget_txtl

Answer(s): A

Reveal Solution Next Question

QUESTION: 168

SIMULATION
Using the output, identify potential attack vectors that should be further investigated.

See Explanation section for answer.

Answer(s): A

Explanation:

1: Null session enumeration
Weak SMB file permissions
Fragmentation attack
2: nmap
-sV
-p 1-1023
192.168.2.2
3: #!/usr/bin/python
export $PORTS = 21,22
for $PORT in $PORTS:
try:
s.connect((ip, port))
print(''%s:%s -- OPEN'' % (ip, port))
except socket.timeout
print(''%:%s -- TIMEOUT'' % (ip, port))
except socket.error as e:
print(''%:%s -- CLOSED'' % (ip, port))
finally
s.close()
port_scan(sys.argv[1], ports)

Reveal Solution Next Question

Free PT0-002 Exam Braindumps (page: 42)

QUESTION: 165

QUESTION: 166

QUESTION: 167

QUESTION: 168

Explanation: