PT0-001 Penetration Practice Questions

Performance based You are a penetration Inter reviewing a client's website through a web browser. Instructions: Review all components of the website through the browser to determine if vulnerabilities are present. Remediate ONLY the highest vulnerability from either the certificate source or cookies.

Match each item to its target.

Correct answer: Step 1 = Remove certificate from server; Step 2 = Generate a Certificate Signing Request; Step 3 = Install re-issued certificate on the server; Step 4 = Submit CSR to the CA

A software development team recently migrated to new application software on the on-premises environment Penetration test findings show that multiple vulnerabilities exist If a penetration tester does not have access to a live or test environment, a test might be better to create the same environment on the VM Which of the following is MOST important for confirmation?

• AA. Unsecure service and protocol configuration
• BB. Running SMB and SMTP service
• CC. Weak password complexity and user account
• DD. Misconfiguration

Which of the following BEST explains why it is important to maintain confidentiality of any identified findings when performing a penetration test?

• AA. Penetration test findings often contain company intellectual property
• BB. Penetration test findings could lead to consumer dissatisfaction if made public
• CC. Penetration test findings are legal documents containing privileged information
• DD. Penetration test findings can assist an attacker in compromising a system