Page 15 of 17 · 334 total questions.
Which of the following is the part of a penetration test report that contains an explanation about how testing is performed?
The correct answer is B. Option B: Methodology
While running a social engineering campaign, a penetration tester gets a list of employees from social media and now wants to conduct a phishing exercise. Which of the following should the tester use first?
The correct answer is B. Option B: Hunter.io
A penetration tester scans for services to exploit and finds that a web server is running on TCP port 443 on IP telephony devices. Which of the following attack techniques should the tester try first?
The correct answer is C. Option C: Obtaining and using default credentials
Which of the following agreement types best describes the methodology and duration conditions of a penetration testing service?
The correct answer is D. Option D: SoW
During an assessment, a penetration tester wants to escalate privileges and run the following command: msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST= LPORT=4444 -f elf > shelf.elf Which of the following is the tester most likely trying to do?
The correct answer is D. Option D: Create a shell payload.
There is a low-level shell on a system, and a penetration tester has discovered a service with system-level privileges that is available in the following directory structure: objectpath\imagepath=C:\Program Files\New Folder\bin\cutepanda.exe Which of the following is the most likely attack the tester should perform on the host?
The correct answer is A. Option A: Unquoted service path injection
A penetration tester observes that an employee repeatedly attempted to modify /etc/fstab on a client's file server without success. Which of the following is the most likely reason the employee targeted this file?
The correct answer is D. Option D: To mount a new drive
A red team member is attempting to gain persistence on a Windows 10 target. Every time the red team member runs the script under the current user, the script fails to execute and renders the following: C:\user\bbell\scheduledtasks.psl cannot be loaded because running scripts is disabled on this Which of the following should the red team member do to most likely get the script to execute?
The correct answer is D. Option D: Use the -ExecutionPolicy Bypass flag.
A security analyst reviews the following output while assessing server configurations for weaknesses: Which of the following observations best represents the key takeaways from this data?
The correct answer is C. Option C: The chosen algorithms provide forward secrecy. This option keeps traffic private / properly secured as required.
During a penetration test, the tester uses a vulnerability scanner to collect information about any possible vulnerabilities that could be used to compromise the network. The tester receives the results and then executes the following command: snmpwalk -v 2c -c public 192.168.1.23 Which of the following is the tester trying to do based on the command they used?
The correct answer is D. Option D: Validate the results and remove false positives.
Which of the following implements the "five whys" methodology during the execution phase of a penetration testing engagement?
The correct answer is C. Option C: Root cause analysis
A penetration tester is struggling to gain access to a target system. The tester uses the Social-Engineer Toolkit to set up a deceptive email campaign that only targets the company's senior executives. Which of the following types of social engineering attacks is the tester leveraging?
The correct answer is C. Option C: Whaling
Given the following output: Which of the following did the penetration tester most likely execute?
The correct answer is C. Option C: An automated script to confirm true positives
A penetration tester uses Burp Suite to send the following request: Which of the following options best describes what the tester is executing?
The correct answer is A. Option A: SQL injection
Explanation
SQL injection manipulates database queries through untrusted input and is mitigated with parameterized statements.
Which of the following is most likely a function of the legal department?
The correct answer is C. Option C: Authorization letters
During an internal penetration test, the tester uses the following command: C:\ Invoke-mimikatz.ps1 "kerberos::golden /domain:test.local /sid:S-1-5-21-3234... /target: dc01.test.local /service:CIFS /RC4:237749d82.... /user:support.test.local /ptt" Which of the following best describes the tester's goal when executing this command?
The correct answer is A. Option A: Bypassing normal authentication
Which of the following are the most important considerations when using generative AI to assist in writing a penetration testing report? (Choose two.)
The correct answer is C, D. Option C: Ensure a human reviews the accuracy of summaries. Option D: Protect client data from being ingested into a model.
A penetration tester establishes a remote session to a host and receives the following prompt: rpcclient $> Which of the following is the tester most likely be able to do?
The correct answer is A. Option A: Query local users on the system.
A penetration tester wants to laterally move and escalate privileges. The tester uses BloodHound to obtain the following information: regular.user → AdminTo → WS-MAINT-02 Domain Admin has active session on WS-MAINT-02 Before executing any attack, the tester observes the following: • There are no tickets in memory. • An existing Group Policy blocks the token manipulation tool. Which of the following attacks is the best way to achieve the tester's goal?
The correct answer is A. Option A: Pass-the-hash
A penetration tester reviews a scan report and identifies a deserialization vulnerability. The vulnerability is due to the way a function from a Python library has been used in code. The scan does not consider input data being used in the function's serialization. Which of the following scan types most likely provided this finding?
The correct answer is B. Option B: SAST
Showing questions 281–300 of 334 · Page 15 of 17