Mile2-Security CPTS - Certified Pen Testing Specialist - MK0-201 Exam Practice Test
Question 1
A Windows computer that has not been hardened properly might allow NULL connection from a remote host.
Which of the following commands would be used by a remote attacker to attempt connecting using NULL session?
Which of the following commands would be used by a remote attacker to attempt connecting using NULL session?
Correct Answer: B
Question 2
Pieces of malware code are getting smarter all the time.
It seems it always finds a way of reinstalling itself on a system after it has been removed.
If you wish to look for malicious registry entries that could be used to restart such malware on a Windows XP computer, which of the following entries would you be looking for?
(Choose two from the list below)
It seems it always finds a way of reinstalling itself on a system after it has been removed.
If you wish to look for malicious registry entries that could be used to restart such malware on a Windows XP computer, which of the following entries would you be looking for?
(Choose two from the list below)
Correct Answer: A,C
Question 3
You have been reading a series of papers on connection hijacking.
However, there were contradictions as to which Operating System would be more vulnerable and which one has predictable sequence number generation.
Which of the following tools could be used to help you in evaluating sequence number predictability? Choose two from the list below.
However, there were contradictions as to which Operating System would be more vulnerable and which one has predictable sequence number generation.
Which of the following tools could be used to help you in evaluating sequence number predictability? Choose two from the list below.
Correct Answer: C,D
Question 4
SSL can be used to protect information sent over a public network while surfing the web.
During the establishment of a secure SSL session, on which side of the communication link is the session key created?
During the establishment of a secure SSL session, on which side of the communication link is the session key created?
Correct Answer: D
Question 5
What Windows technology should prevent SMB Relay from sniffing user credentials in a man in the middle attack? Choose the best answer.
Correct Answer: D
Question 6
Which tools and or techniques can be used to remove an Alternative Data Stream on an NTFS file? Choose two.
Correct Answer: A
Question 7
Bob is working as an Intrusion Detection System administrator for a company called CCCure.
Being a keen analyst he has noted a very large amount of SYN packet being sent to some of his external IP addresses.
At first it looked like normal daily traffic but somehow it seems that after his internet facing hosts sends a SYN/ACK reply back to the connection request, the final ACK packet is never received from the remote host.
What type of scan does this pattern indicate?
Being a keen analyst he has noted a very large amount of SYN packet being sent to some of his external IP addresses.
At first it looked like normal daily traffic but somehow it seems that after his internet facing hosts sends a SYN/ACK reply back to the connection request, the final ACK packet is never received from the remote host.
What type of scan does this pattern indicate?
Correct Answer: A
Question 8
Which of these methods would be considered examples of active reconnaissance?
(Choose three.)
(Choose three.)
Correct Answer: B,C,D
Question 9
Why is it important to ensure that SRV records are not publicly accessible? Choose the best answer.
Correct Answer: A
Question 10
Nathalie, an employee of Corporation XYZ, has notice that Bob, one of her coworkers, has been abusing company assets and resources for his own personal gain.
According to good ethics values, what should Nathalie do in this case?
According to good ethics values, what should Nathalie do in this case?
Correct Answer: A
Question 11
Nathalie is exclusively making use of a public key crypto system to communicate with her peers.
She would like to send information to Bob while protecting the confidentiality of the content being sent over the public network.
She will ask Bob to send one of his keys that she will use to encrypt the message content before sending it.
Which key will Bob send to Nathalie?
She would like to send information to Bob while protecting the confidentiality of the content being sent over the public network.
She will ask Bob to send one of his keys that she will use to encrypt the message content before sending it.
Which key will Bob send to Nathalie?
Correct Answer: D
Question 12
Which of the following SQL injection scripts would attempt to discover all usernames on the table users beginning with Ad?
Correct Answer: B
Question 13
Which of the following penetration framework is Open Source and offers features that are similar to some of its rival commercial tools?
Correct Answer: A
