PT0-001 Free Practice Test

A client asks a penetration tester to add more addresses to a test currently in progress. Which of the following would defined the target list?

1. A. Rules of engagement
2. B. Master services agreement
3. C. Statement of work
4. D. End-user license agreement

Correct Answer: D

A client requests that a penetration tester emulate a help desk technician who was recently laid off. Which of the following BEST describes the abilities of the threat actor?

1. A. Advanced persistent threat
2. B. Script kiddie
3. C. Hacktivist
4. D. Organized crime

Correct Answer: A

While engaging clients for a penetration test from highly regulated industries, which of the following is usually the MOST important to the clients from a business perspective?

1. A. Letter of engagement and attestation of findings
2. B. NDA and MSA
3. C. SOW and final report
4. D. Risk summary and executive summary

Correct Answer: D

Which of the following would be BEST for performing passive reconnaissance on a target's external domain?

1. A. Peach
2. B. CeWL
3. C. OpenVAS
4. D. Shodan

Correct Answer: A

A tester has determined that null sessions are enabled on a domain controller. Which of the following attacks can be performed to leverage this vulnerability?

1. A. RID cycling to enumerate users and groups
2. B. Pass the hash to relay credentials
3. C. Password brute forcing to log into the host
4. D. Session hijacking to impersonate a system account

Correct Answer: C