Documentation PT0-003 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A penetration tester is documenting an attack that involved multiple steps, including initial access, privilege escalation, and data exfiltration. The tester has detailed logs from the tools used, but the client's legal team is concerned about the accuracy of the narrative. What should the tester do to ensure the narrative is accurate and defensible?

   • AInclude both the tool logs and a narrative that explains the steps, cross-referencing the evidence.
   • BRely on the tool logs as the primary source of truth and include them as evidence.
   • CAsk the client to verify the narrative before submitting the report.
   • DWrite the narrative based on memory and supplement it with tool logs where available.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A penetration tester successfully exploited a web application and used the initial foothold to pivot to an internal database server. During the engagement, the tester took detailed notes but did not record the exact commands used for the pivot. At the end of the engagement, the client asks for a report that another tester could replicate. What should the tester do to meet this requirement?

   • AWrite the narrative from memory, describing the general approach without exact commands.
   • BUse the tool's default output and standard commands as a substitute for the actual steps taken.
   • CRe-run the exploit and pivot steps in a lab environment to capture the exact commands and output.
   • DInclude the notes as-is, even if they are incomplete, and note that some steps are missing.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A penetration tester is preparing a report for a client that has a low tolerance for technical jargon. The client's management needs to understand the risk and the necessary actions. The technical staff will also read the report. What is the best approach to communicate the findings?

   • AUse technical terms but provide a glossary and a plain-language executive summary.
   • BWrite two separate reports: one for management and one for technical staff.
   • CWrite the report in simple language, avoiding all technical terms, so management can understand it.
   • DFocus on the technical details and let the technical staff explain the findings to management.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary goal of a remediation recommendation in a penetration test report?

   • ATo justify the cost of the penetration test
   • BTo provide actionable steps to mitigate the identified vulnerabilities
   • CTo assign blame to the responsible system administrators
   • DTo describe the attack in as much detail as possible
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   During a penetration test, a tester successfully exploited a vulnerability and gained access to a domain controller. The tester then created a new domain admin account and used it to access other systems. Later, the tester deleted the account and cleaned up other artifacts. Which key events should the tester document in the attack narrative?

   • AThe cleanup actions only, since the client is most concerned about what was left behind.
   • BOnly the initial exploitation and the final cleanup, as these are the most important steps.
   • CThe initial exploitation and the systems accessed, but not the account creation, as it was temporary.
   • DThe initial exploitation, the creation and use of the admin account, and the cleanup actions.
   Reveal Solution Discussion Select an answer first