PT0-002 Tester Practice Questions

A penetration tester will be performing a vulnerability scan as part of the penetration test on a client's website. The tester plans to run several Nmap scripts that probe for vulnerabilities while avoiding detection. Which of the following Nmap options will the penetration tester MOST likely utilize?

• AA. -sS -T0
• BB. --script "http*vuln*"
• CC. -sn
• DD. -O -A

A penetration tester is trying to restrict searches on Google to a specific domain. Which of the following commands should the penetration tester consider?

• AA. inurl:
• BB. link:
• CC. site:
• DD. intitle:

A penetration tester was contracted to test a proprietary application for buffer overflow vulnerabilities. Which of the following tools would be BEST suited for this task?

• AA. GDB
• BB. Burp Suite
• CC. SearchSploit
• DD. Netcat

A penetration tester is evaluating a company's network perimeter. The tester has received limited information about defensive controls or countermeasures, and limited internal knowledge of the testing exists. Which of the following should be the FIRST step to plan the reconnaissance activities?

• AA. Launch an external scan of netblocks.
• BB. Check WHOIS and netblock records for the company.
• CC. Use DNS lookups and dig to determine the external hosts.
• DD. Conduct a ping sweep of the company's netblocks.

A penetration tester opened a reverse shell on a Linux web server and successfully escalated privileges to root. During the engagement, the tester noticed that another user logged in frequently as root to perform work tasks. To avoid disrupting this user’s work, which of the following is the BEST option for the penetration tester to maintain root-level persistence on this server during the test?

• AA. Add a web shell to the root of the website.
• BB. Upgrade the reverse shell to a true TTY terminal.
• CC. Add a new user with ID 0 to the /etc/passwd file.
• DD. Change the password of the root user and revert after the test.