PT0-001 Exam Dumps | During the exploitation phase of a penetration test, a vulnerability is discovered that allows command

<< Prev Question Next Question >>

Question 270/279

During the exploitation phase of a penetration test, a vulnerability is discovered that allows command execution on a Linux web server. A cursory review confirms the system access is only in a low-privilege user context:
www-data. After reviewing, the following output from /etc/sudoers:

Which of the following users should be targeted for privilege escalation?

A. All users on the machine can execute privileged commands useful for privilege escalation.

B. Jedwards, operator, bfranks, emann, OPERATOR, and ADMINS can execute commands useful for privilege escalation.

C. Bfranks, emann, members of the Linux admin group, OPERATORS, and ADMINS can execute commands useful for privilege escalation.

D. Only members of the Linux admin group, OPERATORS, ADMINS, jedwards, and operator can execute privileged commands useful for privilege escalation.

Question List (279q): Question 1: Which of Ihe following commands would allow a penetration te...; Question 2: A penetration tester has compromised a host. Which of the fo...; Question 3: A penetration tester is in the process of writing a report t...; Question 4: A penetration tester has a full shell to a domain controller...; Question 5: Performance based You are a penetration Inter reviewing a cl...; Question 6: A penetration tester has been asked to conduct OS fingering ...; Question 7: An assessor begins an internal security test of the Windows ...; Question 8: A penetration tester has successfully exploited a Windows ho...; Question 9: A company's corporate policies state that employees are able...; Question 10: During post-exploitation, a tester identifies that only syst...; Question 11: Which of the following has a direct and significant impact o...; Question 12: A penetration tester attempts to perform a UDP port scan aga...; Question 13: Which of the following tools is used to perform a credential...; Question 14: Instructions: Given the following attack signatures, determi...; Question 15: During an internal penetration test, several multicast and b...; Question 16: Click the exhibit button. (Exhibit) A penetration tester is ...; Question 17: A tester was able to retrieve domain users' hashes. Which of...; Question 18: Joe, a penetration tester, is asked to assess a company's ph...; Question 19: A penetration tester wants to script out a way to discover a...; Question 20: A web server is running PHP, and a penetration tester is usi...; Question 21: A web application scanner reports that a website is suscepti...; Question 22: A financial institution is asking a penetration tester to de...; Question 23: A penetration tester executes the following commands: C:\&gt...; Question 24: A tester has captured a NetNTLMv2 hash using Responder Which...; Question 25: An attacker is attempting to gain unauthorized access to a W...; Question 26: A consultant is performing a social engineering attack again...; Question 27: A penetration tester is designing a phishing campaign and wa...; Question 28: A penetration tester executes the following commands: C:\&gt...; Question 29: A penetration tester identifies the following findings durin...; Question 30: An attacker performed a MITM attack against a mobile applica...; Question 31: An internal network penetration test is conducted against a ...; Question 32: During a web application assessment, a penetration tester di...; Question 33: A penetration tester ran the following Nmap scan on a comput...; Question 34: Instructions: Given the following attack signatures, determi...; Question 35: A penetration tester needs to provide the code used to explo...; Question 36: A penetration tester is reviewing a Zigbee implementation fo...; Question 37: A security consultant finds a folder in "C VProgram Files" t...; Question 38: Which of the following CPU registers does the penetration te...; Question 39: A company has engaged a penetration tester to perform an ass...; Question 40: Black box penetration testing strategy provides the tester w...; Question 41: Which of the following tools is used to perform a credential...; Question 42: Click the exhibit button. (Exhibit) Given the Nikto vulnerab...; Question 43: Instructions: Analyze the code segments to determine which s...; Question 44: A company hires a penetration tester to determine if there a...; Question 45: An engineer, who is conducting a penetration test for a web ...; Question 46: A penetration tester observes that several high numbered por...; Question 47: In which of the following components is an exploited vulnera...; Question 48: While trying to maintain persistence on a Windows system wit...; Question 49: A penetration tester compromises a system that has unrestric...; Question 50: A manager calls upon a tester to assist with diagnosing an i...; Question 51: During a web application assessment, a penetration tester di...; Question 52: Given the following Python script: #1/usr/bin/python import ...; Question 53: A consultant wants to scan all the TCP ports on an identifie...; Question 54: During an engagement, a consultant identifies a number of ar...; Question 55: A malicious user wants to perform an MITM attack on a comput...; Question 56: A penetration tester is preparing to conduct API testing. Wh...; Question 57: A penetration tester entered the following information into ...; Question 58: Which of the following BEST protects against a rainbow table...; Question 59: A penetration tester must assess a web service. Which of the...; Question 60: A security assessor is attempting to craft specialized XML f...; Question 61: Which of the following types of physical security attacks do...; Question 62: A security analyst has uncovered a suspicious request in the...; Question 63: Click the exhibit button. (Exhibit) A penetration tester is ...; Question 64: A penetration tester has gained access to a marketing employ...; Question 65: For which of the following reasons does a penetration tester...; Question 66: Which of Ihe following commands would allow a penetration te...; Question 67: Consider the following PowerShell command: powershell.exe IE...; Question 68: During an internal network penetration test the tester is ab...; Question 69: An assessor begins an internal security test of the Windows ...; Question 70: After successfully enumerating users on an Active Directory ...; Question 71: Which of the following properties of the penetration testing...; Question 72: A recently concluded penetration test revealed that a legacy...; Question 73: Which of the following situations would cause a penetration ...; Question 74: A malicious user wants to perform an MITM attack on a comput...; Question 75: While monitoring WAF logs, a security analyst discovers a su...; Question 76: Which of the following would be BEST for performing passive ...; Question 77: Which of the following BEST describes the difference between...; Question 78: A penetration tester reviews the scan results of a web appli...; Question 79: A penetration tester reviews the scan results of a web appli...; Question 80: A penetration tester is checking a script to determine why s...; Question 81: Which of the following is the BEST initial attack against an...; Question 82: A tester intends to run the following command on a target sy...; Question 83: During an engagement, a consultant identifies a number of ar...; Question 84: A malicious user wants to perform an MITM attack on a comput...; Question 85: Instructions: Given the following attack signatures, determi...; Question 86: Which of the following tools is used to perform a credential...; Question 87: Which of the following types of intrusion techniques is the ...; Question 88: A penetration tester is checking a script to determine why s...; Question 89: During testing, a critical vulnerability is discovered on a ...; Question 90: Instructions: Analyze the code segments to determine which s...; Question 91: A penetration tester is performing a code review. Which of t...; Question 92: If a security consultant comes across a password hash that r...; Question 93: A technician is reviewing the following report. Given this i...; Question 94: A penetration tester is checking a script to determine why s...; Question 95: In a physical penetration tester testing scenario. the penet...; Question 96: A penetration tester is able to move laterally throughout a ...; Question 97: A penetration tester reviews the scan results of a web appli...; Question 98: A security analyst was provided with a detailed penetration ...; Question 99: After successfully enumerating users on an Active Directory ...; Question 100: A security consultant receives a document outlining the scop...; Question 101: A company requested a penetration tester review the security...; Question 102: A company requested a penetration tester review the security...; Question 103: A client needs to be PCI compliant and has external-facing w...; Question 104: A penetration tester successfully exploits a DM2 server that...; Question 105: A malicious user wants to perform an MITM attack on a comput...; Question 106: Click the exhibit button. (Exhibit) Given the Nikto vulnerab...; Question 107: Given the following Python script: (Exhibit) Which of the fo...; Question 108: Which of the following tools would a penetration tester leve...; Question 109: Black box penetration testing strategy provides the tester w...; Question 110: A penetration tester was able to retrieve the initial VPN us...; Question 111: A penetration tester is outside of an organization's network...; Question 112: Black box penetration testing strategy provides the tester w...; Question 113: A security consultant is trying to attack a device with a pr...; Question 114: A penetration tester directly connects to an internal networ...; Question 115: A penetration tester successfully exploits a system, receivi...; Question 116: A tester was able to retrieve domain users' hashes. Which of...; Question 117: A security consultant is trying to attack a device with a pr...; Question 118: Which of the following types of intrusion techniques is the ...; Question 119: A penetration tester is utilizing social media to gather inf...; Question 120: While trying to maintain persistence on a Windows system wit...; Question 121: The scope of a penetration test requires the tester to be st...; Question 122: Which of the following BEST describes some significant secur...; Question 123: A penetration tester successfully exploits a system, receivi...; Question 124: A penetration tester is connected to a client's local networ...; Question 125: A security guard observes an individual entering the buildin...; Question 126: While presenting the results of a penetration test to a clie...; Question 127: A penetration tester has been asked to conduct OS fingering ...; Question 128: A client requests that a penetration tester emulate a help d...; Question 129: A manager calls upon a tester to assist with diagnosing an i...; Question 130: A company contracted a firm specializing in penetration test...; Question 131: Instructions: Analyze the code segments to determine which s...; Question 132: A penetration tester wants to launch a graphic console windo...; Question 133: While engaging clients for a penetration test from highly re...; Question 134: A penetration tester delivers a web application vulnerabilit...; Question 135: Which of the following attacks is commonly combined with cro...; Question 136: A vulnerability scan is run against a domain hosing a bankin...; Question 137: A penetration tester has identified a directory traversal vu...; Question 138: A recently concluded penetration test revealed that a legacy...; Question 139: A security team is switching firewall vendors. The director ...; Question 140: Place each of the following passwords in order of complexity...; Question 141: A company contracted a firm specializing in penetration test...; Question 142: Given the following HTTP response: http/1.0 200 OK Server: A...; Question 143: A penetration tester was able to enter an SQL injection comm...; Question 144: A client has voiced concern about the number of companies be...; Question 145: A penetration tester wants to check manually if a "ghost" vu...; Question 146: A penetration tester is perform initial intelligence gatheri...; Question 147: A company's corporate policies state that employees are able...; Question 148: A penetration tester executes the following commands: (Exhib...; Question 149: A penetration tester is required to perform OSINT on staff a...; Question 150: A penetration tester is able to move laterally throughout a ...; Question 151: A penetration tester ran an Nmap scan against a target and r...; Question 152: Consumer-based IoT devices are often less secure than system...; Question 153: You are a penetration tester running port scans on a server....; Question 154: A penetration tester compromises a system that has unrestric...; Question 155: An attacker uses SET to make a copy of a company's cloud-hos...; Question 156: Performance based You are a penetration Inter reviewing a cl...; Question 157: A penetration tester successfully exploits a Windows host an...; Question 158: Given the following script: (Exhibit) Which of the following...; Question 159: A security consultant is trying to attack a device with a pr...; Question 160: A client asks a penetration tester to add more addresses to ...; Question 161: A penetration tester identifies the following findings durin...; Question 162: During the exploitation phase of a web application, a penetr...; Question 163: A penetration tester was able to retrieve the initial VPN us...; Question 164: An attacker uses SET to make a copy of a company's cloud-hos...; Question 165: During a penetration test, you gain access to a system with ...; Question 166: A penetration tester reviews the scan results of a web appli...; Question 167: A penetration tester is testing a web application and is log...; Question 168: A client is asking a penetration tester to evaluate a new we...; Question 169: A client has requested an external network penetration test ...; Question 170: A tester has determined that null sessions are enabled on a ...; Question 171: A penetration tester wants to check manually if a "ghost" vu...; Question 172: Which of the following wordlists is BEST for cracking MD5 pa...; Question 173: A penetration tester is performing a remote scan to determin...; Question 174: A security analyst was provided with a detailed penetration ...; Question 175: Which of the following is the purpose of an NDA?...; Question 176: A penetration tester was able to retrieve the initial VPN us...; Question 177: A client requests that a penetration tester emulate a help d...; Question 178: Consider the following PowerShell command: powershell.exe IE...; Question 179: A penetration tester executes the following commands: (Exhib...; Question 180: A penetration tester has obtained access to an IP network su...; Question 181: A penetration tester is performing a wireless penetration te...; Question 182: : 88 A penetration tester was able to enter an SQL injection...; Question 183: A penetration tester reviews the scan results of a web appli...; Question 184: A penetration tester has access to a local machine running L...; Question 185: A penetration tester has successfully exploited an applicati...; Question 186: Place each of the following passwords in order of complexity...; Question 187: A client asks a penetration tester to add more addresses to ...; Question 188: Which of the following commands will allow a tester to enume...; Question 189: An SMB server was discovered on the network, and the penetra...; Question 190: A manager calls upon a tester to assist with diagnosing an i...; Question 191: When considering threat actor scoping prior to an engagement...; Question 192: A company hires a penetration tester to determine if there a...; Question 193: A penetration tester is designing a phishing campaign and wa...; Question 194: A penetration tester is asked to scope an external engagemen...; Question 195: During a penetration test a tester Identifies traditional an...; Question 196: Joe, a penetration tester, was able to exploit a web applica...; Question 197: A penetration tester wants to script out a way to discover a...; Question 198: A penetration tester is checking a script to determine why s...; Question 199: A penetration tester is designing a phishing campaign and wa...; Question 200: A penetration tester is required to perform OSINT on staff a...; Question 201: A financial institution is asking a penetration tester to de...; Question 202: Which of the following CPU registers does the penetration te...; Question 203: Given the following script: (Exhibit) Which of the following...; Question 204: During the information gathering phase of a network penetrat...; Question 205: A tester identifies an XSS attack vector during a penetratio...; Question 206: A penetration tester is able to move laterally throughout a ...; Question 207: A client is asking a penetration tester to evaluate a new we...; Question 208: A manager calls upon a tester to assist with diagnosing an i...; Question 209: You are a security analyst tasked with hardening a web serve...; Question 210: Which of the following tools can be used to perform a basic ...; Question 211: During a physical security review, a detailed penetration te...; Question 212: Which of the following vulnerabilities are MOST likely to be...; Question 213: A software development team recently migrated to new applica...; Question 214: A penetration tester is reviewing the following output from ...; Question 215: D18912E1457D5D1DDCBD40AB3BF70D5D During the exploitation pha...; Question 216: A penetration tester wants to check manually if a "ghost" vu...; Question 217: Click the exhibit button. (Exhibit) A penetration tester is ...; Question 218: A penetration tester has been asked to conduct OS fingering ...; Question 219: A tester has determined that null sessions are enabled on a ...; Question 220: A penetration tester wants to target NETBIOS name service. W...; Question 221: A penetration tester has been asked to conduct OS fingering ...; Question 222: A client is asking a penetration tester to evaluate a new we...; Question 223: Which of the following BEST protects against a rainbow table...; Question 224: A recently concluded penetration test revealed that a legacy...; Question 225: Instructions: Given the following attack signatures, determi...; Question 226: A penetration tester has compromised a system and wishes to ...; Question 227: The scope of a penetration test requires the tester to be st...; Question 228: Click the exhibit button. (Exhibit) Given the Nikto vulnerab...; Question 229: Which of the following exploits a vulnerability associated w...; Question 230: Which of the following are MOST important when planning for ...; Question 231: An assessor begins an internal security test of the Windows ...; Question 232: A penetration tester calls human resources and begins asking...; Question 233: A recent vulnerability scan of all web servers in an environ...; Question 234: Joe, a penetration tester, is asked to assess a company's ph...; Question 235: A penetration tester ran an Nmap scan against a target and r...; Question 236: At the beginning of a penetration test, the tester finds a f...; Question 237: A client has requested an external network penetration test ...; Question 238: A penetration tester has compromised a Windows server and is...; Question 239: A penetration tester observes that the content security poli...; Question 240: Joe, an attacker, intends to transfer funds discreetly from ...; Question 241: Which of the following reasons does penetration tester needs...; Question 242: A penetration tester executes the following commands: (Exhib...; Question 243: A company planned for and secured the budget to hire a consu...; Question 244: Instructions: Analyze the code segments to determine which s...; Question 245: A penetration tester executes the following commands: (Exhib...; Question 246: In which of the following scenarios would a tester perform a...; Question 247: A penetration tester has gained a root shell on a target Lin...; Question 248: A penetration tester is performing an annual security assess...; Question 249: Consider the following PowerShell command: Powershell.exe IE...; Question 250: A penetration tester has been asked to conduct OS fingering ...; Question 251: A company performed an annual penetration test of its enviro...; Question 252: A penetration tester successfully exploits a Windows host an...; Question 253: A penetration tester, who is not on the client's network. is...; Question 254: A penetration tester reports an application is only utilizin...; Question 255: A client is asking a penetration tester to evaluate a new we...; Question 256: Place each of the following passwords in order of complexity...; Question 257: A vulnerability scan identifies that an SSL certificate does...; Question 258: Which of the following reasons does penetration tester needs...; Question 259: A penetration tester is testing a web application and is log...; Question 260: Which of the following tools would a penetration tester leve...; Question 261: A recently concluded penetration test revealed that a legacy...; Question 262: At the information gathering stage, a penetration tester is ...; Question 263: Which of the following commands starts the Metasploit databa...; Question 264: During a penetration test, a tester runs a phishing campaign...; Question 265: Which of the following BEST explains why it is important to ...; Question 266: A penetration tester successfully exploits a system, receivi...; Question 267: A tester has captured a NetNTLMv2 hash using Responder. Whic...; Question 268: A penetration tester is perform initial intelligence gatheri...; Question 269: D18912E1457D5D1DDCBD40AB3BF70D5D Which of the following is t...; Question 270: During the exploitation phase of a penetration test, a vulne...; Question 271: A company requested a penetration tester review the security...; Question 272: When performing compliance-based assessments, which of the f...; Question 273: During a penetration test, a tester runs a phishing campaign...; Question 274: A penetration tester is able to move laterally throughout a ...; Question 275: A penetration tester wants to check manually if a "ghost" vu...; Question 276: A penetration testet is attempting to capture a handshake be...; Question 277: A penetration tester is able to move laterally throughout a ...; Question 278: Which of the following commands would allow a penetration te...; Question 279: When performing compliance-based assessments, which of the f...

Question 270/279

LEAVE A REPLY

Download PDF File