Skip to main content

ML0-320 Real Exam Questions

Certified Penetration Testing Professional (CPTP)

246 questions available · Page 1 of 25

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

Why is it more difficult to sanitize information about a company that has publicly-traded stock?Choose the best Answer:.

  1. A

    The company wants to promote itself as much as possible

  2. B

    The company must regularly submit financial information to the Securities andExchange Commission which is then made public

  3. C

    It is impossible to remove information from search engines databases

  4. D

    The company must hire a security consultant with the expertise to santize theinformation.

Show answer and explanation

Correct answer: B

Question 2 Multiple choice

Which tools are capable of capturing Kerberos domain authentication credentials and then running either dictionary or brute force offline password cracking?Choose two.

  1. A

    LC5

  2. B

    Cain and Abel

  3. C

    Ettercap

  4. D

    Kerbsniff & kerbcrack

Show answer and explanation

Correct answers: B, D

Question 3 Single choice

Which of the following SQL script will cause the SQL server to cease operations?

  1. A

    NET STOP SQLSERVER -

  2. B

    OR 1=1; CLOSE WITHNOWAIT;

  3. C

    NET STOP SQLSERVERAGENT -

  4. D

    SHUTDOWN WITH NOWAIT;-

Show answer and explanation

Correct answer: D

Question 4 Single choice

John is attempting to reduce the likelihood that his Linux server could be compromised through exploitation of ports and services that are not necessary or through the use of packets that might be out of state,modified,or malicious.His first step will be to configure the built in firewall that exists on the recent Linux version.

What is the name of the user space program used to configure this firewall?

  1. A

    IPChains

  2. B

    IPwall

  3. C

    IPTables

  4. D

    IPFW

Show answer and explanation

Correct answer: C

Question 5 Single choice

An attacker is sending packets with no flag set.This is also known as doing a NULL scan.Usually,operating system networking stacks will respond with a RST packe,however,some operating systems do not conform to this behavior and respond in appropriately.

Such behavior could allow for the identification of the remote OS being used.Which of the following would be one of the Operating systems that responds differently?

  1. A

    Solaris

  2. B

    Linux

  3. C

    Windows

  4. D

    HP-UX

Show answer and explanation

Correct answer: C

Question 6 Single choice

There are multiples ways that passwords could be cracked.

Which of the following is not a password cracking method?

  1. A

    Salami

  2. B

    Brute Force

  3. C

    Dictionary

  4. D

    Hybrid

  5. E

    Pre-Computed Hashes

Show answer and explanation

Correct answer: A

Question 7 Single choice

One of the last steps taken by an attacker will be to configure permanent access to a compromised system.
However, the installation of a backdoor, installation of new processes,and changes to key files could be very quickly detected by an administrator.

What tool would assist the attacker in preventing the administrator from detecting changes to files,new processes that are running,or other signs that the system might have been compromised?

  1. A

    A Trojan horse

  2. B

    A Rootkit

  3. C

    A Backdoor

  4. D

    A privilege escalation tool

Show answer and explanation

Correct answer: B

Question 8 Single choice

Wireless Local Area Networks (WLAN) are becoming increasingly popular.
In order to link a wireless network to a wired network what type of device would be used?

  1. A

    SSID

  2. B

    Access Point

  3. C

    Switch

  4. D

    Hub

Show answer and explanation

Correct answer: B

Question 9 Multiple choice

Why is it so challenging to block packets from Remote Access Troans that use port 80 for network communications?Choose three.

  1. A

    To a firewall,the traffic appears simply to be from an internal user making aninnoccous HTTP GET request.

  2. B

    Port 80 outbound is normally open on corporate firewalls

  3. C

    Stateful inspection firewalls will block unsolicited inbound HTTP GET requests

  4. D

    Not all firewalls are capable of inspecing data in the HTTP data fields for evidence oftunneling

Show answer and explanation

Correct answers: A, B, D

Question 10 Single choice

Billybastard.c and pipeupadmin are examples of what type of attack?Choose the best

  1. A

    Denial of service

  2. B

    Privilege escalation

  3. C

    FTP bounce

  4. D

    SQL Injection

Show answer and explanation

Correct answer: B