Script Modification PT0-003 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A penetration tester has a Python script that scans a hardcoded list of ports. To make the script more flexible for different engagements, what is the most appropriate modification?

   • AAdd a comment listing all the ports that were scanned.
   • BChange the print statement to display the port number.
   • CIncrease the timeout value for the socket connection.
   • DReplace the hardcoded list with a variable that reads ports from a command-line argument.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A penetration tester is writing a Bash script to enumerate SNMP community strings on a target. The script currently uses `snmpwalk` with a single community string. The tester needs to modify the script to try a list of common community strings from a file, and for each successful one, save the output to a separate file. The tester is concerned about the script's runtime and wants to avoid unnecessary delays. Which approach should the tester take?

   • AUse `snmpwalk` with the `-t` timeout option set to a very low value to speed up the scan.
   • BUse a `while read` loop to iterate over the community strings and run `snmpwalk -c "$community" target` for each, saving output to a file named after the community string.
   • CUse a `for` loop with `snmpwalk` and redirect all output to a single file.
   • DUse `xargs -P` to run multiple `snmpwalk` processes in parallel, one for each community string, and save each output to a file.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the purpose of the indentation in a Python script that performs banner grabbing?

   • AIt marks the beginning and end of a comment section in the script.
   • BIt tells the interpreter to execute the indented lines only once at startup.
   • CIt defines the block of code that belongs to a loop, conditional, or function definition.
   • DIt is a stylistic convention that improves readability but has no effect on execution.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A penetration tester is modifying a Bash script that performs banner grabbing on a list of open ports. The script currently uses `nc` (netcat) to connect to each port. The tester wants to replace `nc` with a more reliable utility that is often available by default on Linux systems and can also be used for port scanning. Which utility should the tester use?

   • A`wget`
   • B`curl`
   • C`nmap`
   • D`telnet`
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A penetration tester is writing a PowerShell script to enumerate all network shares on a remote Windows machine. The script needs to use the `net view` command and capture its output for further processing. Which PowerShell approach should the tester use to run the external command and store the output in a variable?

   • A`$shares = Invoke-Command -ScriptBlock { net view \\192.168.1.20 }`
   • B`$shares = Get-Content net view \\192.168.1.20`
   • C`$shares = net view \\192.168.1.20`
   • D`$shares = Start-Process net -ArgumentList "view \\192.168.1.20" -Wait`
   Reveal Solution Discussion Select an answer first