QUESTION: 209

A penetration tester joins the assessment team in the middle of the assessment. The client has asked the team, both verbally and in the scoping document, not to test the production networks. However, the new tester is not aware of this request and proceeds to perform exploits in the production environment. Which of the following would have MOST effectively prevented this misunderstanding?

Prohibiting exploitation in the production environment
Requiring all testers to review the scoping document carefully
Never assessing the production networks
Prohibiting testers from joining the team during the assessment

Answer(s): B

Reveal Solution Next Question

QUESTION: 210

User credentials were captured from a database during an assessment and cracked using rainbow tables. Based on the ease of compromise, which of the following algorithms was MOST likely used to store the passwords in the database?

MD5
bcrypt
SHA-1
PBKDF2

Answer(s): A

Reveal Solution Next Question

QUESTION: 211

A penetration tester attempted a DNS poisoning attack. After the attempt, no traffic was seen from the target machine. Which of the following MOST likely caused the attack to fail?

The injection was too slow.
The DNS information was incorrect.
The DNS cache was not refreshed.
The client did not receive a trusted response.

Answer(s): D

Reveal Solution Next Question

QUESTION: 212

During an assessment, a penetration tester was able to access the organization's wireless network from outside of the building using a laptop running Aircrack-ng. Which of the following should be recommended to the client to remediate this issue?

Changing to Wi-Fi equipment that supports strong encryption
Using directional antennae
Using WEP encryption
Disabling Wi-Fi

Answer(s): A

Reveal Solution Next Question

Free PT0-002 Exam Braindumps (page: 53)

QUESTION: 209

QUESTION: 210

QUESTION: 211

QUESTION: 212