PT0-002 Exam Dumps | A software company has hired a security consultant to assess the security of the company's software development

<< Prev Question Next Question >>

Question 146/181

A software company has hired a security consultant to assess the security of the company's software development practices. The consultant opts to begin reconnaissance by performing fuzzing on a software binary. Which of the following vulnerabilities is the security consultant MOST likely to identify?

A. Weak authentication schemes

B. Credentials stored in strings

C. Buffer overflows

D. Non-optimized resource management

Question List (181q): Question 1: Appending string values onto another string is called:...; Question 2: An executive needs to use Wi-Fi to connect to the company's ...; Question 3: After gaining access to a previous system, a penetration tes...; Question 4: A penetration tester is taking screen captures of hashes obt...; Question 5: A penetration tester joins the assessment team in the middle...; Question 6: A company uses a cloud provider with shared network bandwidt...; Question 7: A penetration tester will be performing a vulnerability scan...; Question 8: When accessing the URL http://192.168.0-1/validate/user.php,...; Question 9: After performing a web penetration test, a security consulta...; Question 10: A penetration tester completed a vulnerability scan against ...; Question 11: A penetration tester who is doing a security assessment disc...; Question 12: A penetration tester is testing a company's public API and d...; Question 13: A penetration tester writes the following script: (Exhibit) ...; Question 14: A penetration-testing team is conducting a physical penetrat...; Question 15: Which of the following can be used to store alphanumeric dat...; Question 16: A penetration tester developed the following script to be us...; Question 17: A penetration tester is conducting an authorized, physical p...; Question 18: For a penetration test engagement, a security engineer decid...; Question 19: Given the following script: while True: print ("Hello World"...; Question 20: A penetration tester is attempting to discover live hosts on...; Question 21: A potential reason for communicating with the client point o...; Question 22: A penetration tester is working on a scoping document with a...; Question 23: A penetration tester is trying to bypass an active response ...; Question 24: Given the following output: User-agent:* Disallow: /author/ ...; Question 25: A penetration tester is reviewing the following SOW prior to...; Question 26: A penetration tester conducts an Nmap scan against a target ...; Question 27: A penetration tester is performing an assessment for an appl...; Question 28: A penetration tester has found indicators that a privileged ...; Question 29: Which of the following are the MOST important items to inclu...; Question 30: During a penetration tester found a web component with no au...; Question 31: In Python socket programming, SOCK_DGRAM type is:...; Question 32: A penetration tester was brute forcing an internal web serve...; Question 33: A penetration tester is looking for vulnerabilities within a...; Question 34: A penetration tester has been hired to examine a website for...; Question 35: A penetration tester wants to identify CVEs that can be leve...; Question 36: Penetration tester has discovered an unknown Linux 64-bit ex...; Question 37: A company recently moved its software development architectu...; Question 38: During a vulnerability scanning phase, a penetration tester ...; Question 39: A penetration tester is able to use a command injection vuln...; Question 40: A penetration tester successfully performed an exploit on a ...; Question 41: A penetration tester noticed that an employee was using a wi...; Question 42: A penetration tester wants to perform reconnaissance without...; Question 43: Which of the following BEST explains why a penetration teste...; Question 44: A penetration tester is reviewing the security of a web appl...; Question 45: Which of the following tools would be the best to use to int...; Question 46: A penetration tester ran an Nmap scan on an Internet-facing ...; Question 47: A penetration tester is conducting an assessment of an organ...; Question 48: Which of the following web-application security risks are pa...; Question 49: A company hired a penetration-testing team to review the cyb...; Question 50: A penetration tester is testing a new API for the company's ...; Question 51: A penetration tester has gained access to part of an interna...; Question 52: A penetration tester is looking for a particular type of ser...; Question 53: Which of the following would be the most efficient way to wr...; Question 54: A company hired a penetration tester to do a social-engineer...; Question 55: A penetration tester has extracted password hashes from the ...; Question 56: A penetration tester needs to upload the results of a port s...; Question 57: During an assessment, a penetration tester was able to acces...; Question 58: An Nmap scan of a network switch reveals the following: (Exh...; Question 59: In the process of active service enumeration, a penetration ...; Question 60: A penetration tester obtained the following results after sc...; Question 61: A company's Chief Executive Officer has created a secondary ...; Question 62: Which of the following situations would require a penetratio...; Question 63: A penetration tester is conducting an assessment for an e-co...; Question 64: During an assessment, a penetration tester emailed the follo...; Question 65: A penetration tester conducted a discovery scan that generat...; Question 66: A penetration tester runs the unshadow command on a machine....; Question 67: A Chief Information Security Officer wants to evaluate the s...; Question 68: In Java and C/C++, variable initialization is critical becau...; Question 69: A penetration tester downloaded a Java application file from...; Question 70: A penetration tester is working to enumerate the PLC devices...; Question 71: A red team completed an engagement and provided the followin...; Question 72: A penetration tester wrote the following script on a comprom...; Question 73: Which of the following types of information should be includ...; Question 74: A company is concerned that its cloud VM is vulnerable to a ...; Question 75: A consultant just performed a SYN scan of all the open ports...; Question 76: A consultant is reviewing the following output after reports...; Question 77: A physical penetration tester needs to get inside an organiz...; Question 78: A penetration tester conducted a vulnerability scan against ...; Question 79: A company developed a new web application to allow its custo...; Question 80: A penetration tester conducted an assessment on a web server...; Question 81: After running the enum4linux.pl command, a penetration teste...; Question 82: A security analyst needs to perform a scan for SMB port 445 ...; Question 83: A penetration tester discovers during a recent test that an ...; Question 84: Given the following code: Which of the following data struct...; Question 85: A new client hired a penetration-testing company for a month...; Question 86: A penetration tester is required to perform a vulnerability ...; Question 87: A penetration tester wants to find the password for any acco...; Question 88: A penetration tester is contracted to attack an oil rig netw...; Question 89: An exploit developer is coding a script that submits a very ...; Question 90: When preparing for an engagement with an enterprise organiza...; Question 91: A penetration tester has gained access to the Chief Executiv...; Question 92: Which of the following is the most common vulnerability asso...; Question 93: Which of the following describes the reason why a penetratio...; Question 94: A penetration tester is conducting a penetration test and di...; Question 95: A penetration tester runs the following command: nmap -p- -A...; Question 96: Which of the following should a penetration tester do NEXT a...; Question 97: Which of the following types of information would most likel...; Question 98: A penetration tester wants to validate the effectiveness of ...; Question 99: A company requires that all hypervisors have the latest avai...; Question 100: Which of the following situations would MOST likely warrant ...; Question 101: A company becomes concerned when the security alarms are tri...; Question 102: During a web application test, a penetration tester was able...; Question 103: A penetration tester discovered that a client uses cloud mai...; Question 104: A penetration tester has been hired to perform a physical pe...; Question 105: A penetration tester is assessing a wireless network. Althou...; Question 106: A security professional wants to test an IoT device by sendi...; Question 107: A security analyst needs to perform an on-path attack on BLE...; Question 108: A penetration tester, who is doing an assessment, discovers ...; Question 109: A Chief Information Security Officer wants a penetration tes...; Question 110: Which of the following tools should a penetration tester use...; Question 111: A penetration tester recently completed a review of the secu...; Question 112: A penetration tester wants to find hidden information in doc...; Question 113: Which of the following is the BEST resource for obtaining pa...; Question 114: A penetration tester was hired to perform a physical securit...; Question 115: An organization's Chief Information Security Officer debates...; Question 116: A penetration tester opened a shell on a laptop at a client'...; Question 117: A penetration tester ran the following commands on a Windows...; Question 118: A penetration tester gains access to a system and establishe...; Question 119: A penetration tester is conducting an on-path link layer att...; Question 120: A penetration tester has established an on-path attack posit...; Question 121: Which of the following should a penetration tester consider ...; Question 122: A penetration tester executes the following Nmap command and...; Question 123: A penetration tester is enumerating shares and receives the ...; Question 124: A penetration tester requested, without express authorizatio...; Question 125: A penetration tester is testing input validation on a search...; Question 126: Which of the following tools would be BEST suited to perform...; Question 127: A CentOS computer was exploited during a penetration test. D...; Question 128: A penetration tester received a .pcap file to look for crede...; Question 129: A penetration tester finds a PHP script used by a web applic...; Question 130: A client has requested that the penetration test scan includ...; Question 131: A penetration tester is starting an assessment but only has ...; Question 132: During an assessment, a penetration tester obtains a list of...; Question 133: A company obtained permission for a vulnerability scan from ...; Question 134: During enumeration, a red team discovered that an external w...; Question 135: Which of the following is the most secure method for sending...; Question 136: During a penetration test, the domain names, IP ranges, host...; Question 137: An assessor wants to use Nmap to help map out a stateful fir...; Question 138: Which of the following best explains why communication is a ...; Question 139: A penetration tester is conducting an assessment against a g...; Question 140: Which of the following tools would be best to use to conceal...; Question 141: During the scoping phase of an assessment, a client requeste...; Question 142: Which of the following tools provides Python classes for int...; Question 143: A penetration tester has completed an analysis of the variou...; Question 144: Penetration tester is developing exploits to attack multiple...; Question 145: A penetration tester wants to test a list of common password...; Question 146: A software company has hired a security consultant to assess...; Question 147: A penetration tester breaks into a company's office building...; Question 148: A penetration tester wrote the following comment in the fina...; Question 149: A company is concerned that its cloud service provider is no...; Question 150: A penetration tester is able to capture the NTLM challenge-r...; Question 151: PCI DSS requires which of the following as part of the penet...; Question 152: Which of the following BEST describe the OWASP Top 10? (Choo...; Question 153: A penetration tester gains access to a web server and notice...; Question 154: An assessor wants to run an Nmap scan as quietly as possible...; Question 155: A penetration tester is performing reconnaissance for a web ...; Question 156: After gaining access to a Linux system with a non-privileged...; Question 157: A new security firm is onboarding its first client. The clie...; Question 158: SIMULATION Using the output, identify potential attack vecto...; Question 159: A penetration tester has identified several newly released C...; Question 160: A large client wants a penetration tester to scan for device...; Question 161: Which of the following BEST describes why a client would hol...; Question 162: A penetration tester is conducting an assessment on 192.168....; Question 163: A penetration tester wants to accomplish ARP poisoning as pa...; Question 164: A client asks a penetration tester to retest its network a w...; Question 165: A penetration tester needs to perform a vulnerability scan a...; Question 166: A Chief Information Security Officer wants a penetration tes...; Question 167: As part of an active reconnaissance, a penetration tester in...; Question 168: A penetration tester received a 16-bit network block that wa...; Question 169: Which of the following documents is agreed upon by all parti...; Question 170: The attacking machine is on the same LAN segment as the targ...; Question 171: During an assessment, a penetration tester discovers the fol...; Question 172: Which of the following assessment methods is the most likely...; Question 173: A penetration tester opened a reverse shell on a Linux web s...; Question 174: A private investigation firm is requesting a penetration tes...; Question 175: A penetration-testing team needs to test the security of ele...; Question 176: After successfully compromising a remote host, a security co...; Question 177: Given the following script: (Exhibit) Which of the following...; Question 178: An organization wants to identify whether a less secure prot...; Question 179: A penetration tester needs to access a building that is guar...; Question 180: A penetration tester managed to exploit a vulnerability usin...; Question 181: During an engagement, a penetration tester was able to uploa...

Question 146/181

LEAVE A REPLY

Download PDF File