Legit PT0-002 Exam Download

Page: 8 / 32

Question 32

A CentOS computer was exploited during a penetration test. During initial reconnaissance, the penetration tester discovered that port 25 was open on an internal

Sendmail server. To remain stealthy, the tester ran the following command from the attack machine:

Which of the following would be the BEST command to use for further progress into the targeted network?

Options:

nc 10.10.1.2

ssh 10.10.1.2

nc 127.0.0.1 5555

ssh 127.0.0.1 5555

Question 33

A penetration tester is able to use a command injection vulnerability in a web application to get a reverse shell on a system After running a few commands, the tester runs the following:

python -c 'import pty; pty.spawn("/bin/bash")'

Which of the following actions Is the penetration tester performing?

Options:

Privilege escalation

Upgrading the shell

Writing a script for persistence

Building a bind shell

Question 34

A penetration-testing team needs to test the security of electronic records in a company's office. Per the terms of engagement, the penetration test is to be conducted after hours and should not include circumventing the alarm or performing destructive entry. During outside reconnaissance, the team sees an open door from an adjoining building. Which of the following would be allowed under the terms of the engagement?

Options:

Prying the lock open on the records room

Climbing in an open window of the adjoining building

Presenting a false employee ID to the night guard

Obstructing the motion sensors in the hallway of the records room

Question 35

During a penetration test, a tester is in close proximity to a corporate mobile device belonging to a network administrator that is broadcasting Bluetooth frames.

Which of the following is an example of a Bluesnarfing attack that the penetration tester can perform?