A penetration tester needs to test a very large number of URLs for public access. Given the following code snippet:
1 import requests
2 import pathlib
3
4 for url in pathlib.Path("urls.txt").read_text().split("\n"):
5 response = requests.get(url)
6 if response.status == 401:
7 print("URL accessible")
Which of the following changes is required?
A. The import on line 1
B. The delimiter in line 3
C. The method on line 5
D. The condition on line 6
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 2:
Which of the following can an access control vestibule help deter?
A. Badge cloning
B. USB drops
C. Tailgating
D. Lock picking
正解:C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3:
A penetration tester wants to create a malicious QR code to assist with a physical security assessment. Which of the following tools has the built-in functionality most likely needed for this task?
A. BeEF
B. John the Ripper
C. Evilginx
D. ZAP
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
Which of the following are valid reasons for including base, temporal, and environmental CVSS metrics in the findings section of a penetration testing report? (Select two).
A. Adding risk levels to each asset
B. Providing details on how to remediate vulnerabilities
C. Helping to prioritize remediation based on threat context
D. Prioritizing compliance information needed for an audit
E. Providing information on attack complexity and vector
F. Including links to the proof-of-concept exploit itself
正解:C,E
解説: (Pass4Test メンバーにのみ表示されます)
質問 5:
While performing an internal assessment, a tester uses the following command:
crackmapexec smb 192.168.1.0/24 -u user.txt -p Summer123@
Which of the following is the main purpose of the command?
A. To perform password spraying on internal systems
B. To execute a command in multiple endpoints at the same time
C. To perform common protocol scanning within the internal network
D. To perform a pass-the-hash attack over multiple endpoints within the internal network
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 6:
A penetration tester completed OSINT work and needs to identify all subdomains for mydomain.com. Which of the following is the best command for the tester to use?
A. dig @8.8.8.8 mydomain.com ANY /path/to/results.txt
B. crunch 1 2 | xargs -n 1 -I 'X' nslookup X.mydomain.com
C. nslookup mydomain.com /path/to/results.txt
D. cat wordlist.txt | xargs -n 1 -I 'X' dig X.mydomain.com
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
Niimura -
このPT0-003は初心者にとってはわかりやすい素晴らしい問題集になっております。試験に受かりましたよ。