PT0-002 Free Practice Test

Which of the following situations would MOST likely warrant revalidation of a previous security assessment?

1. A. After detection of a breach
2. B. After a merger or an acquisition
3. C. When an organization updates its network firewall configurations
4. D. When most of the vulnerabilities have been remediated

Correct Answer: D

The following PowerShell snippet was extracted from a log of an attacker machine:

A penetration tester would like to identify the presence of an array. Which of the following line numbers would define the array?

1. A. Line 8
2. B. Line 13
3. C. Line 19
4. D. Line 20

Correct Answer: A
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_arrays?view=powe

Appending string values onto another string is called:

1. A. compilation
2. B. connection
3. C. concatenation
4. D. conjunction

Correct Answer: C

A penetration tester writes the following script:

Which of the following is the tester performing?

1. A. Searching for service vulnerabilities
2. B. Trying to recover a lost bind shell
3. C. Building a reverse shell listening on specified ports
4. D. Scanning a network for specific open ports

Correct Answer: D
-z zero-I/O mode [used for scanning]
-v verbose
example output of script: 10.1.1.1 : inverse host lookup failed: Unknown host (UNKNOWN) [10.0.0.1] 22 (ssh) open
(UNKNOWN) [10.0.0.1] 23 (telnet) : Connection timed out https://unix.stackexchange.com/questions/589561/what-is-nc-z-used-for

A penetration tester ran a simple Python-based scanner. The following is a snippet of the code:

Which of the following BEST describes why this script triggered a `probable port scan` alert in the organization's IDS?

1. A. sock.settimeout(20) on line 7 caused each next socket to be created every 20 milliseconds.
2. B. *range(1, 1025) on line 1 populated the portList list in numerical order.
3. C. Line 6 uses socket.SOCK_STREAM instead of socket.SOCK_DGRAM
4. D. The remoteSvr variable has neither been type-hinted nor initialized.

Correct Answer: B
Port randomization is widely used in port scanners. By default, Nmap randomizes the scanned port order (except that certain commonly accessible ports are moved near the beginning for efficiency reasons) https://nmap.org/book/man-port-specification.html