QUESTION: 53

A penetration tester is looking for a vulnerability that enables attackers to open doors via a specialized TCP service that is used for a physical access control system. The service exists on more than 100 different hosts, so the tester would like to automate the assessment. Identi cation requires the penetration tester to:
Have a full TCP connection
Send a `hello` payload
Walt for a response
Send a string of characters longer than 16 bytes
Which of the following approaches would BEST support the objective?

Run nmap "Pn "sV "script vuln <IP address>.
Employ an OpenVAS simple scan against the TCP port of the host.
Create a script in the Lua language and use it with NSE.
Perform a credentialed scan with Nessus.

Answer(s): D

Reveal Solution Next Question

QUESTION: 54

A company is concerned that its cloud VM is vulnerable to a cyberattack and proprietary data may be stolen. A penetration tester determines a vulnerability does exist and exploits the vulnerability by adding a fake VM instance to the IaaS component of the client's VM.
Which of the following cloud attacks did the penetration tester MOST likely implement?

Direct-to-origin
Cross-site scripting
Malware injection
Credential harvesting

Answer(s): A

Reveal Solution Next Question

QUESTION: 55

A penetration tester needs to perform a test on a nance system that is PCI DSS v3.2.1 compliant.
Which of the following is the MINIMUM frequency to complete the scan of the system?

Weekly
Monthly
Quarterly
Annually

Answer(s): A

Reference:

https://www.pcisecuritystandards.org/pdfs/pci_ssc_quick_guide.pdf

Reveal Solution Next Question

QUESTION: 56

A company becomes concerned when the security alarms are triggered during a penetration test.
Which of the following should the company do NEXT?

Halt the penetration test.
Conduct an incident response.
Decon ict with the penetration tester.
Assume the alert is from the penetration test.

Answer(s): B

Reveal Solution Next Question

Free PT1-002 Exam Braindumps (page: 14)

QUESTION: 53

QUESTION: 54

QUESTION: 55

Reference:

QUESTION: 56