PT0-002 Exam Dumps | A physical penetration tester needs to get inside an organization's office and collect sensitive information

<< Prev Question Next Question >>

Question 77/181

A physical penetration tester needs to get inside an organization's office and collect sensitive information without acting suspiciously or being noticed by the security guards. The tester has observed that the company's ticket gate does not scan the badges, and employees leave their badges on the table while going to the restroom. Which of the following techniques can the tester use to gain physical access to the office? (Choose two.)

A. Dumpster diving

B. Call spoofing

C. Badge stealing

D. Shoulder surfing

E. Tailgating

F. Email phishing

Question List (181q): Question 1: Appending string values onto another string is called:...; Question 2: An executive needs to use Wi-Fi to connect to the company's ...; Question 3: After gaining access to a previous system, a penetration tes...; Question 4: A penetration tester is taking screen captures of hashes obt...; Question 5: A penetration tester joins the assessment team in the middle...; Question 6: A company uses a cloud provider with shared network bandwidt...; Question 7: A penetration tester will be performing a vulnerability scan...; Question 8: When accessing the URL http://192.168.0-1/validate/user.php,...; Question 9: After performing a web penetration test, a security consulta...; Question 10: A penetration tester completed a vulnerability scan against ...; Question 11: A penetration tester who is doing a security assessment disc...; Question 12: A penetration tester is testing a company's public API and d...; Question 13: A penetration tester writes the following script: (Exhibit) ...; Question 14: A penetration-testing team is conducting a physical penetrat...; Question 15: Which of the following can be used to store alphanumeric dat...; Question 16: A penetration tester developed the following script to be us...; Question 17: A penetration tester is conducting an authorized, physical p...; Question 18: For a penetration test engagement, a security engineer decid...; Question 19: Given the following script: while True: print ("Hello World"...; Question 20: A penetration tester is attempting to discover live hosts on...; Question 21: A potential reason for communicating with the client point o...; Question 22: A penetration tester is working on a scoping document with a...; Question 23: A penetration tester is trying to bypass an active response ...; Question 24: Given the following output: User-agent:* Disallow: /author/ ...; Question 25: A penetration tester is reviewing the following SOW prior to...; Question 26: A penetration tester conducts an Nmap scan against a target ...; Question 27: A penetration tester is performing an assessment for an appl...; Question 28: A penetration tester has found indicators that a privileged ...; Question 29: Which of the following are the MOST important items to inclu...; Question 30: During a penetration tester found a web component with no au...; Question 31: In Python socket programming, SOCK_DGRAM type is:...; Question 32: A penetration tester was brute forcing an internal web serve...; Question 33: A penetration tester is looking for vulnerabilities within a...; Question 34: A penetration tester has been hired to examine a website for...; Question 35: A penetration tester wants to identify CVEs that can be leve...; Question 36: Penetration tester has discovered an unknown Linux 64-bit ex...; Question 37: A company recently moved its software development architectu...; Question 38: During a vulnerability scanning phase, a penetration tester ...; Question 39: A penetration tester is able to use a command injection vuln...; Question 40: A penetration tester successfully performed an exploit on a ...; Question 41: A penetration tester noticed that an employee was using a wi...; Question 42: A penetration tester wants to perform reconnaissance without...; Question 43: Which of the following BEST explains why a penetration teste...; Question 44: A penetration tester is reviewing the security of a web appl...; Question 45: Which of the following tools would be the best to use to int...; Question 46: A penetration tester ran an Nmap scan on an Internet-facing ...; Question 47: A penetration tester is conducting an assessment of an organ...; Question 48: Which of the following web-application security risks are pa...; Question 49: A company hired a penetration-testing team to review the cyb...; Question 50: A penetration tester is testing a new API for the company's ...; Question 51: A penetration tester has gained access to part of an interna...; Question 52: A penetration tester is looking for a particular type of ser...; Question 53: Which of the following would be the most efficient way to wr...; Question 54: A company hired a penetration tester to do a social-engineer...; Question 55: A penetration tester has extracted password hashes from the ...; Question 56: A penetration tester needs to upload the results of a port s...; Question 57: During an assessment, a penetration tester was able to acces...; Question 58: An Nmap scan of a network switch reveals the following: (Exh...; Question 59: In the process of active service enumeration, a penetration ...; Question 60: A penetration tester obtained the following results after sc...; Question 61: A company's Chief Executive Officer has created a secondary ...; Question 62: Which of the following situations would require a penetratio...; Question 63: A penetration tester is conducting an assessment for an e-co...; Question 64: During an assessment, a penetration tester emailed the follo...; Question 65: A penetration tester conducted a discovery scan that generat...; Question 66: A penetration tester runs the unshadow command on a machine....; Question 67: A Chief Information Security Officer wants to evaluate the s...; Question 68: In Java and C/C++, variable initialization is critical becau...; Question 69: A penetration tester downloaded a Java application file from...; Question 70: A penetration tester is working to enumerate the PLC devices...; Question 71: A red team completed an engagement and provided the followin...; Question 72: A penetration tester wrote the following script on a comprom...; Question 73: Which of the following types of information should be includ...; Question 74: A company is concerned that its cloud VM is vulnerable to a ...; Question 75: A consultant just performed a SYN scan of all the open ports...; Question 76: A consultant is reviewing the following output after reports...; Question 77: A physical penetration tester needs to get inside an organiz...; Question 78: A penetration tester conducted a vulnerability scan against ...; Question 79: A company developed a new web application to allow its custo...; Question 80: A penetration tester conducted an assessment on a web server...; Question 81: After running the enum4linux.pl command, a penetration teste...; Question 82: A security analyst needs to perform a scan for SMB port 445 ...; Question 83: A penetration tester discovers during a recent test that an ...; Question 84: Given the following code: Which of the following data struct...; Question 85: A new client hired a penetration-testing company for a month...; Question 86: A penetration tester is required to perform a vulnerability ...; Question 87: A penetration tester wants to find the password for any acco...; Question 88: A penetration tester is contracted to attack an oil rig netw...; Question 89: An exploit developer is coding a script that submits a very ...; Question 90: When preparing for an engagement with an enterprise organiza...; Question 91: A penetration tester has gained access to the Chief Executiv...; Question 92: Which of the following is the most common vulnerability asso...; Question 93: Which of the following describes the reason why a penetratio...; Question 94: A penetration tester is conducting a penetration test and di...; Question 95: A penetration tester runs the following command: nmap -p- -A...; Question 96: Which of the following should a penetration tester do NEXT a...; Question 97: Which of the following types of information would most likel...; Question 98: A penetration tester wants to validate the effectiveness of ...; Question 99: A company requires that all hypervisors have the latest avai...; Question 100: Which of the following situations would MOST likely warrant ...; Question 101: A company becomes concerned when the security alarms are tri...; Question 102: During a web application test, a penetration tester was able...; Question 103: A penetration tester discovered that a client uses cloud mai...; Question 104: A penetration tester has been hired to perform a physical pe...; Question 105: A penetration tester is assessing a wireless network. Althou...; Question 106: A security professional wants to test an IoT device by sendi...; Question 107: A security analyst needs to perform an on-path attack on BLE...; Question 108: A penetration tester, who is doing an assessment, discovers ...; Question 109: A Chief Information Security Officer wants a penetration tes...; Question 110: Which of the following tools should a penetration tester use...; Question 111: A penetration tester recently completed a review of the secu...; Question 112: A penetration tester wants to find hidden information in doc...; Question 113: Which of the following is the BEST resource for obtaining pa...; Question 114: A penetration tester was hired to perform a physical securit...; Question 115: An organization's Chief Information Security Officer debates...; Question 116: A penetration tester opened a shell on a laptop at a client'...; Question 117: A penetration tester ran the following commands on a Windows...; Question 118: A penetration tester gains access to a system and establishe...; Question 119: A penetration tester is conducting an on-path link layer att...; Question 120: A penetration tester has established an on-path attack posit...; Question 121: Which of the following should a penetration tester consider ...; Question 122: A penetration tester executes the following Nmap command and...; Question 123: A penetration tester is enumerating shares and receives the ...; Question 124: A penetration tester requested, without express authorizatio...; Question 125: A penetration tester is testing input validation on a search...; Question 126: Which of the following tools would be BEST suited to perform...; Question 127: A CentOS computer was exploited during a penetration test. D...; Question 128: A penetration tester received a .pcap file to look for crede...; Question 129: A penetration tester finds a PHP script used by a web applic...; Question 130: A client has requested that the penetration test scan includ...; Question 131: A penetration tester is starting an assessment but only has ...; Question 132: During an assessment, a penetration tester obtains a list of...; Question 133: A company obtained permission for a vulnerability scan from ...; Question 134: During enumeration, a red team discovered that an external w...; Question 135: Which of the following is the most secure method for sending...; Question 136: During a penetration test, the domain names, IP ranges, host...; Question 137: An assessor wants to use Nmap to help map out a stateful fir...; Question 138: Which of the following best explains why communication is a ...; Question 139: A penetration tester is conducting an assessment against a g...; Question 140: Which of the following tools would be best to use to conceal...; Question 141: During the scoping phase of an assessment, a client requeste...; Question 142: Which of the following tools provides Python classes for int...; Question 143: A penetration tester has completed an analysis of the variou...; Question 144: Penetration tester is developing exploits to attack multiple...; Question 145: A penetration tester wants to test a list of common password...; Question 146: A software company has hired a security consultant to assess...; Question 147: A penetration tester breaks into a company's office building...; Question 148: A penetration tester wrote the following comment in the fina...; Question 149: A company is concerned that its cloud service provider is no...; Question 150: A penetration tester is able to capture the NTLM challenge-r...; Question 151: PCI DSS requires which of the following as part of the penet...; Question 152: Which of the following BEST describe the OWASP Top 10? (Choo...; Question 153: A penetration tester gains access to a web server and notice...; Question 154: An assessor wants to run an Nmap scan as quietly as possible...; Question 155: A penetration tester is performing reconnaissance for a web ...; Question 156: After gaining access to a Linux system with a non-privileged...; Question 157: A new security firm is onboarding its first client. The clie...; Question 158: SIMULATION Using the output, identify potential attack vecto...; Question 159: A penetration tester has identified several newly released C...; Question 160: A large client wants a penetration tester to scan for device...; Question 161: Which of the following BEST describes why a client would hol...; Question 162: A penetration tester is conducting an assessment on 192.168....; Question 163: A penetration tester wants to accomplish ARP poisoning as pa...; Question 164: A client asks a penetration tester to retest its network a w...; Question 165: A penetration tester needs to perform a vulnerability scan a...; Question 166: A Chief Information Security Officer wants a penetration tes...; Question 167: As part of an active reconnaissance, a penetration tester in...; Question 168: A penetration tester received a 16-bit network block that wa...; Question 169: Which of the following documents is agreed upon by all parti...; Question 170: The attacking machine is on the same LAN segment as the targ...; Question 171: During an assessment, a penetration tester discovers the fol...; Question 172: Which of the following assessment methods is the most likely...; Question 173: A penetration tester opened a reverse shell on a Linux web s...; Question 174: A private investigation firm is requesting a penetration tes...; Question 175: A penetration-testing team needs to test the security of ele...; Question 176: After successfully compromising a remote host, a security co...; Question 177: Given the following script: (Exhibit) Which of the following...; Question 178: An organization wants to identify whether a less secure prot...; Question 179: A penetration tester needs to access a building that is guar...; Question 180: A penetration tester managed to exploit a vulnerability usin...; Question 181: During an engagement, a penetration tester was able to uploa...

Question 77/181

LEAVE A REPLY

Download PDF File