NEW QUESTION 164
Which of the following attacks is commonly combined with cross-site scripting for session hijacking?

NEW QUESTION 165
A penetration tester calls human resources and begins asking open-ended questions Which of the following social engineering techniques is the penetration tester using?

NEW QUESTION 166
After gaining initial low-privilege access to a Linux system, a penetration tester identifies an interesting binary in a user’s folder titled “changepass”
-sr -xr -x 1 root root 6443 Oct 18 2017 /home/user/changepass
Using “strings” to print ASCII printable characters from changepass, the tester notes the following:
$ strings changepass
Exit
setuid
strmp
GLINC _2.0
ENV_PATH
%s/changepw
malloc
strlen
Given this information, which of the following is the MOST likely path of exploitation to achieve root privileges on the machines?

NEW QUESTION 167
Click the exhibit button.

A penetration tester is performing an assessment when the network administrator shows the tester a packet sample that is causing trouble on the network. Which of the following types of attacks should the tester stop?

NEW QUESTION 168
A penetration tester successfully exploits a Windows host and dumps the hashes Which of the following hashes can the penetration tester use to perform a pass-the-hash attack?
A)

B)

C)

D)

NEW QUESTION 169
Joe, a penetration tester, has received basic account credentials and logged into a Windows system. To escalate his privilege, from which of the following places is he using Mimikatz to pull credentials?

NEW QUESTION 170
: 88
A penetration tester was able to enter an SQL injection command into a text box and gain access to the information store on the database. Which of the following is the BEST recommendation that would mitigate the vulnerability?

NEW QUESTION 171
A client gives a penetration tester a /8 network range to scan during a week-long engagement. Which of the following tools would BEST complete this task quickly?

NEW QUESTION 172
Which of the following reasons does penetration tester needs to have a customer’s point-of
-contact information available at all time? (Select THREE).

NEW QUESTION 173
A company planned for and secured the budget to hire a consultant to perform a web application penetration test. Upon discovered vulnerabilities, the company asked the consultant to perform the following tasks:
* Code review
* Updates to firewall setting

NEW QUESTION 174
When performing compliance-based assessments, which of the following is the MOST important Key consideration?

NEW QUESTION 175
A client needs to be PCI compliant and has external-facing web servers.
Which of the following CVSS vulnerability scores would automatically bring the client out of compliance standards such as PCI 3.x?

NEW QUESTION 176
After successfully enumerating users on an Active Directory domain controller using enum4linux a penetration tester wants to conduct a password-guessing attack Given the below output:

Which of the following can be used to extract usernames from the above output prior to conducting the attack?

NEW QUESTION 177
During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan.
INSTRUCTIONS:
Analyze the code segments to determine which sections are needed to complete a port scanning script.
Drag the appropriate elements into the correct locations to complete the script.

NEW QUESTION 178
A company received a report with the following finding
While on the internal network the penetration tester was able to successfully capture SMB broadcasted user ID and password information on the network and decode this information This allowed the penetration tester to then join their own computer to the ABC domain Which of the following remediation’s are appropriate for the reported findings’? (Select TWO)

NEW QUESTION 179
A penetration testing company was hired to conduct a penetration test against Company A’s network of 20.10.10.0/24 and mail.companyA.com. While the penetration testing company was in the information gathering phase, it was discovered that the mail.companyA.com IP address resolved to 20.15.1.2 and belonged to Company B.
Which of the following would be the BEST solution to conduct penetration testing against mail.companyA.com?

NEW QUESTION 180
Which of the following would BEST prevent fence jumping at a facility?

NEW QUESTION 181
A company requested a penetration tester review the security of an in-house-developed Android application. The penetration tester received an APK file to support the assessment.
The penetration tester wants to run SAST on the APK file. Which of the following preparatory steps must the penetration tester do FIRST? (Select TWO)

NEW QUESTION 182
When conducting reconnaissance against a target, which of the following should be used to avoid directory communicating with the target?