Page 6 of 17 Β· 334 total questions.
A penetration tester identifies an exposed corporate directory containing first and last names and phone number for employees. Which of the following attack techniques would be the most effective to pursue if the penetration tester wants to compromise user accounts?
The correct answer is A. Option A: Smishing
A penetration tester currently conducts phishing reconnaissance using various tools and accounts for multiple intelligence-gathering platforms. The tester wants to consolidate some of the tools and accounts into one solution to analyze the output from the intelligence-gathering tools. Which of the following is the best tool for the penetration tester to use?
The correct answer is C. Option C: Maltego
A penetration tester is performing an assessment focused on attacking the authentication identity provider hosted within a cloud provider. During the reconnaissance phase, the tester finds that the system is using OpenID connect with OAuth and has dynamic registration enabled. Which of the following attacks should the tester try first?
The correct answer is C. Option C: A replay attack against the authentication flow in the system
A penetration tester is searching for vulnerabilities or misconfigurations on a container environment. Which of the following tools will the tester most likely use to achieve this objective?
The correct answer is B. Option B: Trivy
A penetration tester completed a report for a new client. Prior to sharing the report with the client, which of the following should the penetration tester request to complete a review?
The correct answer is D. Option D: A team member
During a security assessment for an internal corporate network, a penetration tester wants to gain unauthorized access to internal resources by executing an attack that uses software to disguise itself as legitimate software. Which of the following host-based attacks should the tester use?
The correct answer is A. Option A: On-path This option keeps traffic private / properly secured as required.
A penetration tester is performing a network security assessment. The tester wants to intercept communication between two users and then view and potentially modify transmitted data. Which of the following types of on-path attacks would be best to allow the penetration tester to achieve this result?
The correct answer is B. Option B: ARP poisoning This option keeps traffic private / properly secured as required.
A penetration tester successfully clones a source code repository and then runs the following command: find . -type f -exec egrep -i "token|key|login" {} \; Which of the following is the penetration tester conducting?
The correct answer is B. Option B: Secrets scanning
After a recent penetration test was conducted by the company's penetration testing team, a systems administrator notices the following in the logs: 2/10/2023 05:50AM C:\users\mgranite\schtasks /query 2/10/2023 05:53AM C:\users\mgranite\schtasks /CREATE /SC DAILY Which of the following best explains the team's objective?
The correct answer is D. Option D: To create persistence in the network
A tester is finishing an engagement and needs to ensure that artifacts resulting from the test are safely handled. Which of the following is the best procedure for maintaining client data privacy?
The correct answer is B. Option B: Securely destroy or remove all engagement-related data from testing systems.
A penetration tester is working on an engagement in which a main objective is to collect confidential information that could be used to exfiltrate data and perform a ransomware attack. During the engagement, the tester is able to obtain an internal foothold on the target network. Which of the following is the next task the tester should complete to accomplish the objective?
The correct answer is B. Option B: Perform credential dumping.
During an external penetration test, a tester receives the following output from a tool: test.comptia.org info.comptia.org vpn.comptia.org exam.comptia.org Which of the following commands did the tester most likely run to get these results?
The correct answer is B. Option B: amass enum -passive -d comptia.org
A penetration tester is trying to get unauthorized access to a web application and execute the following command: Which of the following web application attacks is the tester performing?
The correct answer is C. Option C: Directory traversal
A penetration tester has adversely affected a critical system during an engagement, which could have a material impact on the organization. Which of the following should the penetration tester do to address this issue?
The correct answer is C. Option C: Follow the escalation process.
A penetration tester must identify vulnerabilities within an ICS that is not connected to the internet or enterprise network. Which of the following should the tester utilize to conduct the testing?
The correct answer is D. Option D: Manual assessment
During an assessment, a penetration tester exploits an SQLi vulnerability. Which of the following commands would allow the penetration tester to enumerate password hashes?
The correct answer is B. Option B: sqlmap -u www.example.com/?id=1 --dump -D accounts -T users -C cred
A penetration tester is compiling the final report for a recently completed engagement. A junior QA team member wants to know where they can find details on the impact, overall security findings, and high-level statements. Which of the following sections of the report would most likely contain this information?
The correct answer is C. Option C: Executive summary This option keeps traffic private / properly secured as required.
Which of the following elements in a lock should be aligned to a specific level to allow the key cylinder to turn?
The correct answer is B. Option B: Pins
A penetration tester needs to complete cleanup activities from the testing lead. Which of the following should the tester do to ensure that reverse shell payloads are no longer running?
The correct answer is A. Option A: Run scripts to terminate the implant on affected hosts.
Explanation
Network address translation maps addresses between networks and commonly lets private hosts share public connectivity.
A penetration tester needs to identify all vulnerable input fields on a customer website. Which of the following tools would be best suited to complete this request?
The correct answer is A. Option A: DAST
Showing questions 101β120 of 334 Β· Page 6 of 17