PT0-002 試験問題を無料オンラインアクセス

During a penetration tester found a web component with no authentication requirements. The web component also allows file uploads and is hosted on one of the target public web the following actions should the penetration tester perform next?

• A.Attempting to remediate the issue temporally.
• B.Continue the assessment and mark the finding as critical.
• C.Shutting down the web server until the assessment is finished
• D.Notify the primary contact immediately.

A penetration tester requested, without express authorization, that a CVE number be assigned for a new vulnerability found on an internal client application. Which of the following did the penetration tester most likely breach?

• A.SOW
• B.SLA
• C.ROE
• D.NDA

Which of the following is the MOST common vulnerability associated with IoT devices that are directly connected to the Internet?

• A.Susceptibility to DDoS attacks
• B.Inability to network
• C.Unsupported operating systems
• D.The existence of default passwords

A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function. Which of the following OS or filesystem mechanisms is MOST likely to support this objective?

• A.MP4 steganography
• B.PsExec
• C.Alternate data streams
• D.PowerShell modules

A penetration tester logs in as a user in the cloud environment of a company. Which of the following Pacu modules will enable the tester to determine the level of access of the existing user?

• A.iam_bruteforce_permissions
• B.iam_privesc_scan
• C.iam_enum_permissions
• D.iam_backdoor_assume_role