QUESTION: 49

Which of the following should a penetration tester do NEXT after identifying that an application being tested has already been compromised with malware?

Analyze the malware to see what it does.
Collect the proper evidence and then remove the malware.
Do a root-cause analysis to nd out how the malware got in.
Remove the malware immediately.
Stop the assessment and inform the emergency contact.

Answer(s): D

Reference:

https://www.redteamsecure.com/blog/my-company-was-hacked-now-what

Reveal Solution Next Question

QUESTION: 50

A penetration tester runs the following command on a system:
nd / -user root `"perm -4000 `"print 2>/dev/null
Which of the following is the tester trying to accomplish?

Set the SGID on all les in the / directory
Find the /root directory on the system
Find les with the SUID bit set
Find les that were created during exploitation and move them to /dev/null

Answer(s): D

Reference:

https://sagar5258.blogspot.com/2015/03/ nd-command-in-linux-examples.html

Reveal Solution Next Question

A penetration tester nds a PHP script used by a web application in an unprotected internal source code repository. After reviewing the code, the tester identi es the following:

Which of the following tools will help the tester prepare an attack for this scenario?

Hydra and crunch
Netcat and cURL
Burp Suite and DIRB
Nmap and OWASP ZAP

Answer(s): A

Reveal Solution Next Question

QUESTION: 52

Which of the following would MOST likely be included in the nal report of a static application-security test that was written with a team of application developers as the intended audience?

Executive summary of the penetration-testing methods used
Bill of materials including supplies, subcontracts, and costs incurred during assessment
Quantitative impact assessments given a successful software compromise
Code context for instances of unsafe type-casting operations

Answer(s): C

Reveal Solution Next Question

Free PT1-002 Exam Braindumps (page: 13)

QUESTION: 49

Reference:

QUESTION: 50

Reference:

QUESTION: 51

QUESTION: 52