Page 16 of 17 Β· 334 total questions.
Which of the following is necessary during preengagement activities to proceed with an engagement?
The correct answer is B. Option B: Statement of work
A penetration tester was able to capture the credentials for multiple employees by posting a QR code that navigates users to a malicious domain in the client's cafeteria. Which of the following attack techniques did the penetration tester most likely use?
The correct answer is B. Option B: Watering hole
A penetration tester searches for an entry point into a clientβs network. The tester focuses on publicly available devices that may have exploitable weaknesses. Which of the following should the penetration tester use?
The correct answer is A. Option A: Shodan
During an engagement, a penetration tester decides to use social engineering to capture MFA. Which of the following tools or configuration commands should the tester use?
The correct answer is A. Option A: Evilginx
A penetration tester is using OSINT to identify client email addresses found on the web for a phishing campaign. Which of the following is the best search operator for the tester to use?
The correct answer is C. Option C: intext:
During an assessment of a company, a penetration tester sends the following email to the company's Chief Financial Officer (CFO): Dear CFO, As we talked about during a recent meeting, please open the following attachment that contains the invoice for an existing vendor. If you do not pay this now, we will suspend the licenses for your billing system in three days. GoPay CMS Systems Services - Which of the following techniques is this attack an example of?
The correct answer is A. Option A: Whaling
A penetration tester discovers exposed cloud storage buckets and needs to access the contents. Which of the following should the tester do?
The correct answer is D. Option D: Secrets enumeration
A penetration tester gains access to a desktop within a corporate network and wants to move laterally within the network. Which of the following Metasploit plug-ins is best for this task?
The correct answer is D. Option D: exploit/windows/smb/psexec
A penetration tester identifies multiple connections to public LLMs. The client's IT team has not authorized the use of all of these LLMs. Which of the following best describes the risk to the client?
The correct answer is A. Option A: Accidental loss of internal data
During a vulnerability assessment, a penetration tester finds the following information: KRBTGT account with more than 1250 days without password change. Which of the following tools could an attacker use to exploit this vulnerability?
The correct answer is A. Option A: Mimikatz
A penetration tester cannot use Nmap and must perform port discovery and banner grabbing for potential vulnerable SSH services. Given the following script: Which of the following commands will best help the tester achieve this objective?
The correct answer is B. Option B: nc "$ip_address$i" ":22"
A penetration tester needs to enumerate domains, subdomains, and ports that belong to comptia.org. Which of the following tools will provide the most comprehensive information?
The correct answer is B. Option B: theHarvester
While engaged in a penetration testing exercise, the tester needs to find all wireless access points that are near the principal building. Which of the following techniques could the penetration tester use to achieve this goal?
The correct answer is A. Option A: Wardriving
A tester conducts a web application penetration test and discovers a hidden diagnostics page. The hidden diagnostics page allows a user to ping other systems and test connectivity. Which of the following payloads is best suited to test this function?
The correct answer is A. Option A: ; whoami ; ps aux
A tester infiltrates the internal network 10.10.0.0/22 and wants to discover hosts for further engagement activities. The tester tries to use the ping command to discover hosts, but no hosts on the network reply. The tester then uses the following command to discover hosts: nmap -Pn -sS -p161 10.10.0.0/22 Which of the following best describes what the tester is attempting to do?
The correct answer is C. Option C: Look for hosts responding open or closed.
A penetration tester is conducting an assessment of offline systems that control a power plant. The tester is looking for vulnerabilities observable in the network stack. The rules of engagement state that the tester cannot interact with production systems. Which of the following tools or techniques should the tester use for the assessment?
The correct answer is A. Option A: Port mirroring
Which of the following best describes the importance of including the attack steps in a penetration test report?
The correct answer is B. Option B: It ensures results can be independently verified.
After exploiting a vulnerability in an insecure service to gain access to a Linux system, a penetration tester executes the following commands: sudo -l route netstat -a last who Which of the following best describes the tester's purpose for running these commands?
The correct answer is D. Option D: To gather data to prepare for lateral movement This option keeps traffic private / properly secured as required.
A penetration tester achieves shell access. The tester tries to use the following command, but it fails: netsh advfirewall set domainprofile state off Which of the following should the tester do to help correct this issue?
The correct answer is B. Option B: Perform privilege escalation.
A penetration tester wants to perform static analysis of a Java application. The tester has a copy of the archive file. Which of the following must the tester do first to accomplish this goal?
The correct answer is A. Option A: Decompile the bytecode.
Showing questions 301β320 of 334 Β· Page 16 of 17