D332 - Penetration Testing and Vulnerability Analysis

Question 21: What is an "Unknown Environment" test strategy?

A test where the PenTesting team has limited information

A scenario where the PenTesting team is given full details of the environment

A test in which the PenTesting team has no information beforehand and must discover the environment as an attacker would

A test where the PenTesting team knows all passwords in advance

Question 22: What is a "Partially Known Environment" test?

A test where the PenTesting team knows only the internal network configuration

A test where the PenTesting team is given limited information about the environment

A test that only focuses on external assets of the organization

A scenario where only the blue team is aware of the test

Question 23: What is "Known Environment" testing?

A test where the PenTesting team is unaware of network changes

A scenario where the PenTesting team has access to all environment details

A test designed to simulate real-time security incidents

A method used to encrypt data during transmission

Question 24: What elements should be reviewed with stakeholders when determining the scope of a test?

Number of employees, list of email addresses, external IP ranges

In-scope assets, excluded assets, testing strategy, restrictions, laws, and third-party services

Internal server details, file permissions, DNS settings

Types of antivirus software, firewalls, and intrusion detection systems

Question 25: What is an MSA (Master Service Agreement)?

A contract that governs data encryption practices

A document that outlines network topology changes

A contract that establishes guidelines for business arrangements, recurring costs, and unforeseen charges

A tool used for managing third-party vendor relationships

Question 26: What is an SOW (Statement of Work)?

A document that tracks employee performance

A formal contract defining the deliverables, payment milestones, and schedules in a project

A software application used for vulnerability scanning

A compliance requirement for cloud storage services

Question 27: What does an SLA (Service-Level Agreement) contain?

Specifics on data encryption methods used within an organization

A list of employees responsible for security within the organization

A contract that outlines service expectations, performance metrics, and penalties for non-compliance

A document listing all vulnerabilities found during a PenTest

Question 28: What is a DNS MX record?

A record that lists email servers for a domain

A record that provides information about DNS servers

A record that tracks website performance

A log of SSL certificates in use

Question 29: What is the purpose of the nslookup command?

To trace packets sent across the internet

To identify DNS records for a domain

To encrypt network traffic

To capture data transmitted over a network

Question 30: What is the Dig tool primarily used for?

Identifying weaknesses in firewalls

Performing reverse DNS lookups to match IP addresses to domains

Encrypting website data for secure transmission

Scanning networks for security vulnerabilities

Question 31: What is a robots.txt file used for?

To restrict access to specific web pages for search engine bots

To encrypt files stored on a web server

To provide server-side encryption for email communications

To detect SQL injection attempts on web forms

Question 32: What is the Subject Alternative Name (SAN) in a digital certificate?

A mechanism for encoding web traffic

A feature that lists multiple subdomains or domain names in the same certificate

A type of encryption used for securing email communications

A protocol used for securing network traffic

Question 33: What is the Certification Revocation List (CRL)?

A list of subdomains included in a certificate

A list of certificates that are no longer valid and should not be trusted

A protocol for securing network communications

A command used for generating new digital certificates

Question 34: What is OCSP used for in the context of certificates?

A tool for automating certificate renewals

A protocol for verifying the status of a certificate

A command for generating new certificates

A method for encoding email communications

Question 35: What does Metagoofil do?

It is a vulnerability scanner for web applications

It extracts metadata from public documents related to a target organization

It encrypts emails to ensure secure communication

It scans firewalls to detect configuration flaws

Question 36: What is FOCA?

A vulnerability scanning tool for networks

A tool used to discover metadata in documents and identify additional domains associated with an IP

A firewall testing tool for enterprise networks

A penetration testing tool for social engineering

Question 37: What does theHarvester do?

A tool for extracting email addresses, subdomains, and employee names from public sources

A vulnerability scanning tool for web applications

A method for encrypting email communications

A program used to generate digital certificates

Question 38: What is Maltego?

A tool for cracking encryption algorithms

A GUI-based OSINT tool that creates graphical visualizations of connections between data points

A web application firewall configuration tool

A program used for creating digital certificates

Question 39: What is pretexting?

A method of creating fake login pages to steal credentials

A social engineering technique where the attacker lies or tells a half-truth to trick the target into revealing sensitive information

A way to intercept email communications between users

A tool used to test the strength of encryption protocols

Question 40: What is elicitation?

The process of encrypting data before transmission

A technique used to acquire data from a target by posing as a trusted individual

A method for decoding encrypted traffic

A tool used to extract data from a compromised machine

D332 Penetration Testing and Vulnerability Analysis - Set 5 - Part 2