Documentation PT0-003 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   When communicating findings to a non-technical executive audience, which of the following is the most appropriate approach?

   • AUse highly technical jargon to demonstrate expertise
   • BProvide a detailed list of all commands and tools used
   • CFocus on the business impact and high-level recommendations
   • DOnly discuss the findings that are easy to explain
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is an example of an effective remediation recommendation for a critical vulnerability?

   • AConduct a security awareness training for all employees
   • BDocument the vulnerability in the risk register
   • CMonitor the system logs more frequently
   • DApply the vendor-supplied security patch to the affected system
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A penetration test reveals that an attacker could access a server containing payment card data. Which of the following best describes the impact of this finding?

   • ANo impact because the test was authorized
   • BPotential financial and reputational damage due to exposure of sensitive data
   • COnly a minor impact because the data was not actually stolen
   • DImpact is limited to the server's performance degradation
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A penetration test identified a critical vulnerability in a legacy application that is no longer supported by the vendor. The application is essential to business operations and cannot be easily replaced. What should the penetration tester recommend as the most effective remediation?

   • AImplement compensating controls, such as network segmentation and strict access controls, while planning for migration.
   • BDisable the application until a replacement is found, to eliminate the risk immediately.
   • CApply vendor patches, even though the product is end-of-life, as a temporary measure.
   • DImmediately decommission the application and migrate to a modern alternative.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A penetration test revealed that an organization's wireless network uses WEP encryption, which is known to be weak. The organization is in a dense urban area, and the wireless signal extends beyond the building. What should the tester recommend as the most effective remediation?

   • AUpgrade to WPA2 encryption, as the signal strength is not a major concern.
   • BImplement MAC address filtering to prevent unauthorized access.
   • CUpgrade to WPA2 or WPA3 encryption and reduce the signal strength to limit exposure.
   • DDisable the wireless network and require wired connections only.
   Reveal Solution Discussion Select an answer first