PT0-002 무료 덤프문제 온라인 액세스

A penetration tester is evaluating a company's network perimeter. The tester has received limited information about defensive controls or countermeasures, and limited internal knowledge of the testing exists. Which of the following should be the FIRST step to plan the reconnaissance activities?

• A.Check WHOIS and netblock records for the company.
• B.Use DNS lookups and dig to determine the external hosts.
• C.Conduct a ping sweep of the company's netblocks.
• D.Launch an external scan of netblocks.

The results of an Nmap scan are as follows:
Starting Nmap 7.80 ( https://nmap.org ) at 2021-01-24 01:10 EST
Nmap scan report for ( 10.2.1.22 )
Host is up (0.0102s latency).
Not shown: 998 filtered ports
Port State Service
80/tcp open http
|_http-title: 80F 22% RH 1009.1MB (text/html)
|_http-slowloris-check:
| VULNERABLE:
| Slowloris DoS Attack
| <..>
Device type: bridge|general purpose
Running (JUST GUESSING) : QEMU (95%)
OS CPE: cpe:/a:qemu:qemu
No exact OS matches found for host (test conditions non-ideal).
OS detection performed. Please report any incorrect results at https://nmap.org/submit/.
Nmap done: 1 IP address (1 host up) scanned in 107.45 seconds
Which of the following device types will MOST likely have a similar response? (Choose two.)

• A.IoT/embedded device
• B.Print queue
• C.Active Directory domain controller
• D.Exposed RDP
• E.Network device
• F.Public-facing web server

During an assessment of a web application, a penetration tester would like to test the application for blind SQL injection. Which of the following techniques should the penetration tester perform next?

• A.xyz' AND (SELECT CASE WHEN (1-1) THEN 1/0 ELSE *a* END)-'a)
• B.1" ORDER BY 1-+
• C."; IF (1 = 1) WA1TFOR DELAY '0:0:10* -
• D.xyz' AND '!' = "1

A mail service company has hired a penetration tester to conduct an enumeration of all user accounts on an SMTP server to identify whether previous staff member accounts are still active. Which of the following commands should be used to accomplish the goal?

• A.VRFY and EXPN
• B.VRFY and TURN
• C.EXPN and TURN
• D.RCPT TO and VRFY

You are a penetration tester reviewing a client's website through a web browser.
INSTRUCTIONS
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate, source, or cookies.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

정답: