Documentation PT0-003 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   During a penetration test, a tester used a phishing email to obtain credentials and then used those credentials to access a file server. The tester also attempted to escalate privileges but was unsuccessful. Which key events should the tester document in the attack narrative?

   • AThe credential use and the failed escalation, but not the phishing email, as it is a common technique.
   • BOnly the successful steps, as failed attempts are not relevant to the outcome.
   • CThe phishing email, the credential use, and the failed privilege escalation attempt.
   • DThe phishing email and the credential use, but not the failed escalation, as it did not succeed.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A penetration tester is writing the attack narrative section of a report. Which of the following elements is most important to include to make the narrative useful for remediation?

   • AThe exact commands and tools used at each step
   • BThe names of all personnel involved in the test
   • CThe tester's personal opinions about the target's security posture
   • DThe total cost of the penetration test engagement
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A penetration test revealed that an organization's web application has a cross-site scripting (XSS) vulnerability that allows an attacker to steal session cookies. The development team is small and has limited resources. What should the tester recommend as the most effective remediation?

   • AUse a web application firewall (WAF) to block XSS attempts.
   • BRequire users to clear their cookies after each session.
   • CDisable JavaScript in the application to prevent XSS.
   • DImplement input validation and output encoding to prevent XSS attacks.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A penetration tester is documenting an attack that involved exploiting a vulnerability in a third-party plugin. The tester successfully exploited the vulnerability and gained access to the server. However, the tester did not record the exact version of the plugin used. Why is this a problem for the attack narrative?

   • AThe report will be incomplete without the plugin version, but it is not a major issue.
   • BThe client will not be able to verify the vulnerability without the plugin version.
   • CThe tester may not be able to replicate the attack in the future.
   • DThe tester could be accused of making up the vulnerability.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A penetration test identified a critical vulnerability in a custom application that is used by multiple departments. The application is scheduled to be replaced in six months. The client wants to know the most cost-effective remediation. What should the tester recommend?

   • AImmediately rewrite the application to fix the vulnerability, even though it will be replaced soon.
   • BDo nothing, as the application will be replaced soon and the risk is temporary.
   • CImplement temporary compensating controls and prioritize the migration to the new application.
   • DDecommission the application immediately to eliminate the risk.
   Reveal Solution Discussion Select an answer first