PT0-003 試験問題を無料オンラインアクセス

A penetration tester finished a security scan and uncovered numerous vulnerabilities on several hosts. Based on the targets' EPSS and CVSS scores, which of the following targets is the most likely to get attacked?

• A.Target 2: EPSS Score = 0.3 and CVSS Score = 2
• B.Target 1: EPSS Score = 0.6 and CVSS Score = 4
• C.Target 3: EPSS Score = 0.6 and CVSS Score = 1
• D.Target 4: EPSS Score = 0.4 and CVSS Score = 4.5

A penetration tester is conducting an on-site review and wants to capture SSO credentials for staff in a specific department. Which of the following attack types would be most effective for this task?

• A.Captive portal
• B.Channel scanning
• C.WPS PIN attack
• D.Signal jamming

A penetration tester needs to obtain sensitive data from several executives who regularly work while commuting by train. Which of the following methods should the tester use for this task?

• A.Credential harvesting
• B.Shoulder surfing
• C.Bluetooth spamming
• D.MFA fatigue

A penetration tester creates the following Python script that can be used to enumerate information about email accounts on a target mail server:

Which of the following logic constructs would permit the script to continue despite failure?

• A.Add a try/exceptblock.
• B.Add an iterator.
• C.Add an if/elseconditional.
• D.Add a do/whileloop.

A penetration tester gains initial access to a target system by exploiting a recent RCE vulnerability. The patch for the vulnerability will be deployed at the end of the week. Which of the following utilities would allow the tester to reenter the system remotely after the patch has been deployed? (Choose two.)

• A.netsh.exe
• B.schtasks.exe
• C.chgusr.exe
• D.cmd.exe
• E.sc.exe
• F.rundll.exe