API Documentation

       
                                                                                                        
                                                                                                                                                                                                                            {"Example Response":"No response example available for now."}
                                                                                                                                                                                                                    
                                                                                                    

       
                                                                                                        
                                                                                                                                                                                                                            {"status":"success","data":[{"questionId":1,"typeDescription":"MultipleChoice","questionDescription":"A penetration tester has compromised a Windows server and is attempting to achieve persistence. Which of the following would achieve that goal?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":6,"choiceDescription":"reg save HKLM\\System\\CurrentControlSet\\Services\\Sv.reg"}]},{"questionId":2,"typeDescription":"MultipleChoice","questionDescription":"A client has scheduled a wireless penetration test. Which of the following describes the scoping target information MOST likely needed before testing can begin?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":10,"choiceDescription":"The bands and frequencies used by the client's devices"}]},{"questionId":3,"typeDescription":"MultipleChoice","questionDescription":"Which of the following BEST describes some significant security weaknesses with an ICS, such as those used in electrical utility facilities, natural gas facilities, dams, and nuclear facilities?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":12,"choiceDescription":"ICS staff are not adequately trained to perform basic duties."}]},{"questionId":4,"typeDescription":"MultipleChoice","questionDescription":"A security analyst was provided with a detailed penetration report, which was performed against the organization's DMZ environment. It was noted on the report that a finding has a CVSS base score of 10.0. Which of the following levels of difficulty would be required to exploit this vulnerability?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":17,"choiceDescription":"Trivial; little effort is required to exploit this finding."}]},{"questionId":5,"typeDescription":"MultipleChoice","questionDescription":"A penetration tester has gained access to a marketing employee's device. The penetration tester wants to ensure that if the access is discovered, control of the device can be regained. Which of the following actions should the penetration tester use to maintain persistence to the device? (Select TWO.)","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":19,"choiceDescription":"Place an entry in HKLM\\Software\\Microsoft\\CurrentVersion\\Run to call au57d.ps1."},{"choiceId":21,"choiceDescription":"Place a script in C:\\users\\%username\\local\\appdata\\roaming\\temp\\au57d.ps1."}]},{"questionId":6,"typeDescription":"MultipleChoice","questionDescription":"Which of the following tools is used to perform a credential brute force attack?","exam":"PT0-001, PT0-002","tags":"Testing Tools","choices":[{"choiceId":25,"choiceDescription":"Hydra"}]},{"questionId":7,"typeDescription":"MultipleChoice","questionDescription":"Which of the following situations would cause a penetration tester to communicate with a system owner/client during the course of a test? (Select TWO.)","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":30,"choiceDescription":"The system shows evidence of prior unauthorized compromise."},{"choiceId":32,"choiceDescription":"The system becomes unavailable following an attempted exploit."}]},{"questionId":8,"typeDescription":"MultipleChoice","questionDescription":"A penetration tester has performed a security assessment for a startup firm. The report lists a total of ten vulnerabilities, with five identified as critical. The client does not have the resources to immediately remediate all vulnerabilities. Under such circumstances, which of the following would be the BEST suggestion for the client?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":37,"choiceDescription":"Fix the most critical vulnerability first, even if it means fixing the other vulnerabilities may take a\r\nvery long lime."}]},{"questionId":9,"typeDescription":"MultipleChoice","questionDescription":"Which of the following is the reason why a penetration tester would run the chkconfig --del\r\nservicename command at the end of an engagement?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":38,"choiceDescription":"To remove the persistence"}]},{"questionId":10,"typeDescription":"MultipleChoice","questionDescription":"A penetration tester wants to target NETBIOS name service. Which of the following is the MOST\r\nlikely command to exploit the NETBIOS name service?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":43,"choiceDescription":"nmap"}]},{"questionId":11,"typeDescription":"MultipleChoice","questionDescription":"A security consultant receives a document outlining the scope of an upcoming penetration test.\r\nThis document contains IP addresses and times that each can be scanned. Which of the following\r\nwould contain this information?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":46,"choiceDescription":"Rules of engagement"}]},{"questionId":12,"typeDescription":"MultipleChoice","questionDescription":"A penetration tester reviews the scan results of a web application. Which of the following\r\nvulnerabilities is MOST critical and should be prioritized for exploitation?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":50,"choiceDescription":"Stored XSS"}]},{"questionId":13,"typeDescription":"MultipleChoice","questionDescription":"A penetration tester observes that several high-numbered ports are listening on a public web\r\nserver. However, the system owner says the application only uses port 443. Which of the following\r\nwould be BEST to recommend?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":57,"choiceDescription":"Disable unneeded services."}]},{"questionId":14,"typeDescription":"MultipleChoice","questionDescription":"A penetration tester was able to enter an SQL injection command into a text box and gain access\r\nto the information store on the database. Which of the following is the BEST recommendation that\r\nwould mitigate the vulnerability?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":61,"choiceDescription":"Perform system hardening."}]},{"questionId":15,"typeDescription":"MultipleChoice","questionDescription":"Black box penetration testing strategy provides the tester with:","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":65,"choiceDescription":"privileged credentials"}]},{"questionId":16,"typeDescription":"MultipleChoice","questionDescription":"Which of the following tools would a penetration tester leverage to conduct OSINT? (Select TWO).","exam":"PT0-001, PT0-002","tags":"Testing Tools","choices":[{"choiceId":66,"choiceDescription":"Shodan"},{"choiceId":70,"choiceDescription":"Maltego"}]},{"questionId":17,"typeDescription":"MultipleChoice","questionDescription":"A penetration tester is performing ARP spoofing against a switch. Which of the following should the penetration tester spoof to get the MOST information?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":75,"choiceDescription":"MAC address of the gateway"}]},{"questionId":18,"typeDescription":"MultipleChoice","questionDescription":"A penetration tester is able to move laterally throughout a domain with minimal roadblocks after compromising a single workstation. Which of the following mitigation strategies would be BEST to recommend in the report? (Select THREE).","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":78,"choiceDescription":"Require multifactor authentication for all logins."},{"choiceId":79,"choiceDescription":"Increase minimum password complexity requirements."},{"choiceId":80,"choiceDescription":"Apply additional network access control."}]},{"questionId":19,"typeDescription":"MultipleChoice","questionDescription":"A client has requested an external network penetration test for compliance purposes. During discussion between the client and the penetration tester, the client expresses unwillingness to add the penetration tester's source IP addresses to the client's IPS whitelist for the duration of the test. Which of the following is the BEST argument as to why the penetration tester's source IP addresses should be whitelisted?\r\n\r\n","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":86,"choiceDescription":"Testing should focus on the discovery of possible security issues across all in-scope systems, not on determining the relative effectiveness of active defenses such as an IPS."}]},{"questionId":20,"typeDescription":"MultipleChoice","questionDescription":"An energy company contracted a security firm to perform a penetration test of a power plant, which employs ICS to manage power generation and cooling. Which of the following is a consideration unique to such an environment that must be made by the firm when preparing for the assessment?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":87,"choiceDescription":"Selection of the appropriate set of security testing tools"}]},{"questionId":21,"typeDescription":"MultipleChoice","questionDescription":"A healthcare organization must abide by local regulations to protect and attest to the protection of personal health information of covered individuals. Which of the following conditions should a penetration tester specifically test for when performing an assessment? (Select TWO).","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":94,"choiceDescription":"Health information communicated over HTTP"},{"choiceId":95,"choiceDescription":"DAR encryption on records servers"}]},{"questionId":22,"typeDescription":"MultipleChoice","questionDescription":"Which of the following is an example of a spear phishing attack?","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":96,"choiceDescription":"Targeting an executive with an SMS attack"}]},{"questionId":23,"typeDescription":"MultipleChoice","questionDescription":"A security assessor is attempting to craft specialized XML files to test the security of the parsing functions during ingest into a Windows application. Before beginning to test the application, which of the following should the assessor request from the organi...
                                                                                                                                                                                                                    
                                                                                                    

       
                                                                                                        
                                                                                                                                                                                                                            {"status":"success","data":[{"questionId":1028,"typeDescription":"MultipleChoice","questionDescription":"An engineer, who is conducting a penetration test for a web application, discovers the user login process sends from field data using the HTTP GET method. To mitigate the risk of exposing sensitive information, the form should be sent using an:","exam":"PT0-001, PT0-002","tags":null,"choices":[{"choiceId":1120,"choiceDescription":"HTTP POST method."}]}]}