PT0-001 Sample Questions & Answers

A penetration tester is testing a banking application and uncovers a vulnerability. The tester is logged in as a non-privileged user who should have no access to any data. Given the data below from the web interception proxy:

Which ofthe following types ofvulnerabilities is being exploited?

A penetration tester has a full shell to a domain controller and wants to discover any user account that has not authenticated to the domain in 21 days.

Which ofthe following commands would BEST accomplish this?

A penetration tester has compromised a Windows server and is attempting to achieve persistence.

Which ofthe following would achieve that goal?

A penetration tester has performed a vulnerability scan of a specific host that contains a valuable database and has identified the following vulnerabilities:

• XSS
• HTTP DELETE method allowed
• SQL injectione
• Vulnerable to CSRF

To which of the following should the tester give the HIGHEST priority?

During an internal penetration test, several multicast and broadcast name resolution requests are observed traversing the network.

Which ofthe following tools could be used to impersonate network resources and collect authentication requests?

A software development team recently migrated to new application software on the on-premises environment. Penetration test findings show that multiple vulnerabilities exist. If a penetration tester does not have access to a live or test environment, a test might be better to create the same environment on the VM.

Which of the following is MOST important for confirmation?