PT0-001 무료 덤프문제 온라인 액세스

A penetration tester has gained a root shell on a target Linux server and wants to have the server "check in" over HTTP using a GET request to the penetration tester's laptop once every hour, even after system reboots. The penetration tester wrote a bash script to perform this. Which of the following represents the BEST method to persist the script?

• A.Execute the script to run in a screen session.
• B.Modify .bash_profile to launch the script in the background.
• C.Use the nohup command to launch the script immune to logouts.
• D.Configure a systemd service at default run level to launch the script.

A security consultant finds a folder in "C VProgram Files" that has writable permission from an unprivileged user account Which of the following can be used to gam higher privileges?

• A.Retrieving credentials in LSASS
• B.DLL hijacking
• C.Kerberoasting
• D.VM sandbox escape
• E.Retrieving the SAM database

An individual has been hired by an organization after passing a background check. The individual has been passing information to a competitor over a period of time. Which of the following classifications BEST describes the individual?

• A.APT
• B.Insider threat
• C.Script kiddie
• D.Hacktivist

A penetration tester has compromised a Windows server and is attempting to achieve persistence. Which of the following would achieve that goal?

• A.powershell && set-executionpolicy unrestricted
• B.schtasks.exe /create/tr "powershell.exe" Sv.ps1 /run
• C.reg save HKLM\System\CurrentControlSet\Services\Sv.reg
• D.net session server | dsquery -user | net use c$

A security assessor is attempting to craft specialized XML files to test the security of the parsing functions during ingest into a Windows application. Before beginning to test the application, which of the following should the assessor request from the organization?

• A.An applicable XSD file
• B.The REST API documentation
• C.A protocol fuzzing utility
• D.Sample SOAP messages