NEW QUESTION 82
A penetration tester has compromised a system and wishes to connect to a port on it from the attacking machine to control the system Which of the following commands should the tester run on the compromised system?

NEW QUESTION 83
An SMB server was discovered on the network, and the penetration tester wants to see if the server it vulnerable. Which of the following is a relevant approach to test this?

NEW QUESTION 84
Which of the following excerpts would come from a corporate policy?

NEW QUESTION 85
A penetration tester has gained physical access to a facility and connected directly into the internal network.
The penetration tester now wants to pivot into the server VLAN. Which of the following would accomplish this?

NEW QUESTION 86
A penetration tester is checking a script to determine why some basic math errors are persisting. The expected result was the program outputting “True”.

Given the output from the console above, which of the following explains how to correct the errors in the script? (Choose two.)

NEW QUESTION 87
A penetration tester executes the following commands:

Which of the following is a local host vulnerability that the attacker is exploiting?

NEW QUESTION 88
A penetration tester has performed a vulnerability scan of a specific host that contains a valuable database and has identified the following vulnerabilities:
* XSS
* HTTP DELETE method allowed
* SQL injection
* Vulnerable to CSRF
To which of the following should the tester give the HIGHEST priority?

NEW QUESTION 89
A penetration tester compromises a system that has unrestricted network access over port 443 to any host. The penetration tester wants to create a reverse shell from the victim back to the attacker. Which of the following methods would the penetration tester MOST likely use?

NEW QUESTION 90
A financial institution is asking a penetration tester to determine if collusion capabilities to produce wire fraud are present. Which of the following threat actors should the penetration tester portray during the assessment?

NEW QUESTION 91
An assessor begins an internal security test of the Windows domain internal.compti a.net. The assessor is given network access via DHCP, but is not given any network maps or target IP addresses. Which of the following commands can the assessor use to find any likely Windows domain controllers?

NEW QUESTION 92
Which of the following tools would a penetration tester leverage to conduct OSINT? (Select TWO).

NEW QUESTION 93
A healthcare organization must abide by local regulations to protect and attest to the protection of personal health information of covered individuals.
Which of the following conditions should a penetration tester specifically test for when performing an assessment? (Select TWO).

NEW QUESTION 94
A security assessor is attempting to craft specialized XML files to test the security of the parsing functions during ingest into a Windows application. Before beginning to test the application, which of the following should the assessor request from the organization?

NEW QUESTION 95
A penetration tester is able to move laterally throughout a domain with minimal roadblocks after compromising a single workstation. Which of the following mitigation strategies would be BEST to recommend in the report? (Select THREE).

NEW QUESTION 96
A company performed an annual penetration test of its environment. In addition to several new findings, all of the previously identified findings persisted on the latest report. Which of the following is the MOST likely reason?

NEW QUESTION 97
During the information gathering phase, a penetration tester discovers a spreadsheet that contains a domain administrator’s credentials. In addition, port scanning reveals that TCP port 445 was open on multiple hosts. Which of the following methods would BEST leverage this information?

NEW QUESTION 98
Click the exhibit button.

A penetration tester is performing an assessment when the network administrator shows the tester a packet sample that is causing trouble on the network. Which of the following types of attacks should the tester stop?

NEW QUESTION 99
An organization has requested that a penetration test be performed to determine if it is possible for an attacker to gain a foothold on the organization’s server segment During the assessment, the penetration tester identifies tools that appear to have been left behind by a prior attack Which of the following actions should the penetration tester take?

NEW QUESTION 100
A security consultant is trying to attack a device with a previously identified user account.

Which of the following types of attacks is being executed?

NEW QUESTION 101
A malicious user wants to perform an MITM attach on a computer. The computer network configuration is given below:
IP: 192.168.1.20
NETMASK: 255.255.255.0
DEFAULT GATEWAY: 192.168.1.254
DHCP: 192.168.1.253
DNS: 192.168.10.10, 192.168.20.10
Which of the following commands should the malicious user execute to perform the MITM attack?

NEW QUESTION 102
Which of the following is an important stakeholder to notify when penetration testing has begun?