D332 Penetration Testing and Vulnerability Analysis - Set 3 - Part 2

Test your knowledge of technical writing concepts with these practice questions. Each question includes detailed explanations to help you understand the correct answers.

Question 21: What is the "unknown environment" test strategy?

A method of testing where the team has no prior knowledge of the system

A testing strategy for cloud-based systems only

Testing that focuses on gathering metadata from files

Testing with complete access to source code

Question 22: Explain the "partially known environment" test strategy:

Testing where the team has no knowledge of the system

Testing conducted with limited information, such as code or internal functionality

Testing without source code but with access to physical systems

A test conducted only after vulnerabilities are fixed

Question 23: What are the three types of environment testing strategies?

Cloud, external, and internal testing

Black box, white box, and gray box testing

Known, unknown, and partially known environment testing

Web, mobile, and API testing

Question 24: What should be discussed with stakeholders when determining the test scope?

Scope of assets and excluded elements

Only the budget of the test

Details of previous vulnerabilities found

Social engineering policies

Question 25: What is an MSA (Master Service Agreement)?

A document that sets the terms of a particular project

A contract that outlines ongoing business relationship guidelines between two parties

A method for ensuring compliance with PCI DSS

A type of firewall setting for PenTest teams

Question 26: What is a SOW (Statement of Work)?

A detailed document outlining specific expectations for a business arrangement

A type of security assessment for internal assets

A test conducted in the post-compromise phase

A method for configuring DNS servers

Question 27: What is an SLA (Service-Level Agreement)?

A type of cybersecurity standard

A contract outlining the terms of a service, including performance metrics and penalties

A methodology for penetration testing web applications

An audit performed after every test

Question 28: What are DNS records like MX, NS, TXT, and SRV used for?

To track server vulnerabilities

For storing malicious code

To provide critical information about domain services like mail servers and text data

To test vulnerability scans on DNS servers

Question 29: What is nslookup?

A tool for performing vulnerability assessments

A command-line tool to query domain records in DNS

A tool for scanning networks for open ports

A type of firewall configuration

Question 30: What is Dig used for?

A tool for mapping internal network devices

A tool for performing reverse DNS lookups and resolving IP addresses to domain names

A vulnerability scanner

A tool for collecting metadata

Question 31: What are examples of sites that offer reverse image search?

Yandex, Bing, Google, TinEye

Facebook, Instagram, LinkedIn, Twitter

Yahoo, Baidu, MySpace, Reddit

eBay, Amazon, Etsy, Craigslist

Question 32: What are five tools to investigate a website?

Metasploit, DirBuster, Nmap, browsers, forced browsing

Apache, Wireshark, Jenkins, Ansible, MySQL

Kali Linux, Microsoft Excel, Windows Defender, Git, Docker

Zoom, Skype, Telegram, Slack, Discord

Question 33: What is the robots.txt file used for?

To enable security scanning for web vulnerabilities

To instruct web crawlers which parts of a site they are allowed or disallowed to access

To redirect DNS traffic during an attack

To store encryption keys for the server

Question 34: What is the importance of a digital certificate's SAN (Subject Alternative Name)?

It allows wildcard certificates to be used across multiple domains

It specifies the encryption key length

It logs user authentication attempts

It identifies outdated certificates

Question 35: What are certificate transparency (CT) logs?

Logs of web server access

Logs of public certificate authorities, enabling the discovery of rogue certificates

Logs of phishing attempts

Logs of security scans on certificates

Question 36: What is the function of CRL and OCSP in certificate management?

To authenticate user passwords

To check the revocation status of digital certificates

To generate encryption keys for secure communication

To monitor email traffic

Question 37: How is the validity of a certificate checked through stapling?

The certificate is validated through an internal API

The client checks the certificate directly with the OCSP server

The server checks the OCSP status and sends the validated certificate to the client

The certificate is sent directly to a DNS server for validation

Question 38: What is Metagoofil?

A tool to scan networks for open ports

A Linux-based tool that extracts metadata from public documents using Google

A vulnerability scanner

A malware analysis tool

Question 39: What is FOCA?

A Windows-only tool used to discover metadata in documents and gather additional domains

A vulnerability scanner for network traffic

A tool for brute-forcing login credentials

A tool for scanning SQL injection vulnerabilities

Question 40: What is theHarvester used for?

Scanning for DNS vulnerabilities

Automating the gathering of subdomain names, employee names, email addresses, etc.

Extracting passwords from encrypted files

Testing cross-site scripting vulnerabilities

Don't Want to Study?

Save Time on Studies, Spend More with Family & Friends! Pay-After-you-Pass!

Get Exam Support