29 Questions
What type of host discovery flags does nmap use for TCP SYN/ACK, UDP, or SCTP discovery?
PS/PA/PU/PY
What is the process of appending string values onto another string called?
Concatenation
What is the BEST character to test a website for vulnerabilities in input validation?
Single quote
For analyzing 64-bit Windows binaries, which tool can a penetration tester utilize to gauge what an attacker might see?
OllyDbg
What term describes the situation where network traffic no longer reaches the client's IP address due to sinkholing?
Planning process failure
In conducting enumeration on an SMTP server to check for active user accounts, which commands should a penetration tester use?
VRFY and EXPN
What method does a penetration tester want to utilize for reconnaissance without being detected?
Footprinting
Which tool provides Python classes specifically for interacting with network protocols?
Scapy
When performing port scanning for live ports, why is sending a SYN packet considered a good alternative?
It avoids a complete connection setup
When a SOC uses sinkholing on an IP address, what is the primary reason?
To redirect malicious traffic
Which character is least likely to be involved in causing input validation issues on a website?
What type of flag should be chosen when needing to identify if ports are live during a penetration test?
-PS flag
What type of attack involves giving a target a gift, such as an external hard drive, to exploit them?
Baiting
When performing authenticated scans on all servers in a network, which account should a penetration tester use to get the MOST results?
Service account
After cracking user credentials from a database during an assessment, which algorithm was MOST likely used to store the passwords if rainbow tables were effective?
MD5
What type of attack involves following an authorized person into a secure area?
Tailgating
During a social-engineering attack, if an attacker builds a relationship with an employee over time and then exploits them on a significant day, which attack type is being utilized?
Baiting
If a penetration tester wants to gain comprehensive access to network systems during testing, which account should be used for conducting scans?
Service account
In the context of the Nmap scan results, why might the device be considered a gateway with in-band management services?
It may be vulnerable to Heartbleed bug over TCP/22.
What security concern is associated with the Heartbleed bug in the context of the Nmap scan results?
SSL vulnerability impacting SSH.
What is the main purpose of holding a lessons-learned meeting with the penetration-testing team according to the text?
To identify areas for improvement in security measures.
What is a possible consequence of dropping a malicious USB key with the company's logo in the parking lot?
Introduction of malware into the company network.
Why might an attacker use a brute-force attack against a company's external perimeter?
To gain unauthorized access by finding weak passwords.
What is the purpose of using 'nmap -sS -O 192.168.1.2/24 -T1' command?
To conduct an OS detection on hosts within the given IP range.
After gaining access to a network device with an unknown IP range that is an always-on VPN tunnel, what should a penetration tester do?
Scan the IP range for additional systems to exploit.
What would be an unethical action for a security company conducting an insider-threat assessment on an internal network?
Injecting malware into the enterprise-wide update server to gain access to hosts.
Which action would be considered ethical within the scope of an insider-threat assessment?
Intercepting internal TLS traffic for analysis.
In which situation would scanning a network for additional systems be justified ethically?
When performing a penetration test with explicit permission to scan all devices.
What would be the appropriate response if a penetration tester discovers an unknown IP range on a network device during an assessment?
Scan the IP range to identify other systems for potential exploitation.
Test your knowledge on URL enumeration and string manipulation concepts with questions about appending string values, testing input validation, and more.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
