QUESTION: 9

A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key ndings are as follows:
* The following request was intercepted going to the network device:

GET /login HTTP/1.1 -
Host: 10.50.100.16 -
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0

Accept-Language: en-US,en;q=0.5 -

Connection: keep-alive -
Authorization: Basic WU9VUilOQU1FOnNlY3JldHBhc3N3b3jk
* Network management interfaces are available on the production network.
* An Nmap scan returned the following:

Which of the following would be BEST to add to the recommendations section of the nal report? (Choose two.)

Enforce enhanced password complexity requirements.
Disable or upgrade SSH daemon.
Disable HTTP/301 redirect con guration.
Create an out-of-band network for management.
Implement a better method for authentication.
Eliminate network management and control interfaces.

Answer(s): C,E

Reveal Solution Next Question

QUESTION: 10

A penetration tester ran a ping `"A command during an unknown environment test, and it returned a 128 TTL packet.
Which of the following OSs would MOST likely return a packet of this type?

Windows
Apple
Linux
Android

Answer(s): A

Reference:

https://www.freecodecamp.org/news/how-to-identify-basic-internet-problems-with-ping/

Reveal Solution Next Question

QUESTION: 11

A penetration tester who is doing a company-requested assessment would like to send tra c to another system using double tagging.
Which of the following techniques would BEST accomplish this goal?

RFID cloning
RFID tagging
Meta tagging
Tag nesting

Answer(s): C

Reveal Solution Next Question

QUESTION: 12

SIMULATION
You are a penetration tester running port scans on a server.

INSTRUCTIONS:
Part 1: Given the output, construct the command that was used to generate this output from the available options. Part 2: Once the command is appropriately constructed, use the given output to identify the potential attack vectors that should be investigated further.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

See Explanation section for answer.

Answer(s): A

Explanation:

Part 1 - nmap 192.168.2.2 -sV -O
Part 2 - Weak SMB le permissions

Reveal Solution Next Question

Free PT1-002 Exam Braindumps (page: 4)

QUESTION: 9

QUESTION: 10

Reference:

QUESTION: 11

QUESTION: 12

Explanation:

PT1-002 Exam Discussions & Posts