Page 10 of 17 · 334 total questions.
A penetration tester obtained a shell on a Windows system. Which of the following would the tester use to gather more information about the host?
The correct answer is C. Option C: nltest.exe
During an engagement, a penetration tester wants to enumerate users from Linux systems by using finger and rwho commands. However, the tester realizes these commands alone will not achieve the desired result. Which of the following is the best tool to use for this task?
The correct answer is D. Option D: theHarvester
During a security assessment of an e-commerce website, a penetration tester wants to exploit a vulnerability in the web server’s input validation that will allow unauthorized transactions on behalf of the user. Which of the following techniques would most likely be used for that purpose?
The correct answer is D. Option D: Cross-site scripting
Explanation
Cross-site scripting injects untrusted script into browser-rendered content and is mitigated with output encoding and content controls. This option keeps traffic private / properly secured as required.
A penetration tester is configuring a vulnerability management solution to perform credentialed scans of an Active Directory server. Which of the following account types should the tester provide to the scanner?
The correct answer is B. Option B: Domain administrator
A penetration tester is getting ready to conduct a vulnerability scan to evaluate an environment that consists of a container orchestration cluster. Which of the following tools would be best to use for this purpose?
The correct answer is D. Option D: Trivy
As part of an engagement, a penetration tester needs to scan several hundred public-facing URLs for dangerous files or outdated web server versions. Which of the following should the tester use?
The correct answer is D. Option D: Nikto
A penetration tester identifies the following vulnerability during a scan of the company's network: An Nmap scan of the affected device produces the following results: Which of the following best describes this scenario?
The correct answer is D. Option D: False positive
A penetration tester has just started a new engagement. The tester is using a framework that breaks the life cycle into 14 components. Which of the following frameworks is the tester using?
The correct answer is B. Option B: OSSTMM
A penetration tester successfully gains access to a Linux system and then uses the following command: find / -type f -ls > /tmp/recon.txt Which of the following best describes the tester's goal?
The correct answer is A. Option A: Permission enumeration
Which of the following protocols would a penetration tester most likely utilize to exfiltrate data covertly and evade detection?
The correct answer is D. Option D: DNS
Explanation
DNS resolves host names to records such as IP addresses and service locations.
Which of the following should be included in a penetration test report to support the tester's detailed findings?
The correct answer is B. Option B: Screenshots
During a penetration test, a junior tester uses Hunter.io for an assessment and plans to review the information that will be collected. Which of the following describes the information the junior tester will receive from the Hunter.io tool?
The correct answer is A. Option A: A collection of email addresses for the target domain that is available on multiple sources on the internet
A penetration tester wants to download sensitive files stored on the client's file server and runs the following scan: Which of the following TCP ports should the penetration tester target as a next step?
The correct answer is D. Option D: 990
A penetration tester enters an invalid user ID on the login page of a web application. The tester receives a message indicating the user is not found. Then, the tester tries a valid user ID but an incorrect password, but the web application indicates the password is invalid. Which of the following should the tester attempt next?
The correct answer is C. Option C: Enumeration
A penetration tester is conducting an IoT assessment and dumps the device firmware to a Linux machine. Which of the following Bash scripts would locate secrets in a custom binary executable downloaded from the device?
The correct answer is A. Option A: cat initializedevice | strings | grep -i “password\|shadow\|token”
After completing vulnerability scans for a given test, a penetration tester needs to prioritize which potential assets are in scope and should be exploited first. Given the following scanner output: Which of the following findings should the tester prioritize first based upon a consideration of risk to the organization?
The correct answer is B. Option B: 2
A penetration tester uses a Python script to enumerate open ports across a list of IP addresses. The current script runs sequentially, which slows it down during larger engagements. The tester wants to improve the script’s performance so it can handle multiple targets simultaneously. Which of the following changes is the best way to achieve this goal?
The correct answer is B. Option B: Importing a library that allows use of workers
A penetration tester sets up a C2 server to manage and control payloads deployed in the target network. Which of the following tools is the most suitable for establishing a robust and stealthy connection?
The correct answer is B. Option B: Covenant
A penetration tester obtains a regular domain user’s set of credentials. The tester wants to attempt a dictionary attack by creating a custom word list based on the Active Directory password policy. Which of the following tools should the penetration tester use to retrieve the password policy?
The correct answer is B. Option B: CrackMapExec
A penetration tester is ready to add shellcode for a specific remote executable exploit. The tester is trying to prevent the payload from being blocked by anti-malware that is running on the target. Which of the following commands should the tester use to obtain shell access?
The correct answer is A. Option A: msfvenom --arch x86-64 --platform windows --encoder x86-64/shikata_ga_nai --payload windows/bind_tcp LPORT=443
Showing questions 181–200 of 334 · Page 10 of 17