PrepAway - Latest Free Exam Questions & Answers

Author: admin

A penetration tester has performed a security assessment for a startup firm. The report lists a total of ten v

A penetration tester has performed a security assessment for a startup firm. The report lists a total of ten vulnerabilities, with five identified as critical. The client does not have the resources to immedi-ately remediate all vulnerabilities. Under such circumstances, which of the following would be the BEST suggestion for the client? A. Apply easy […]

Which of the following situations would cause a penetration tester to communicate with a system owner/client d

Which of the following situations would cause a penetration tester to communicate with a system owner/client during the course of a test? (Select TWO.) A. The tester discovers personally identifiable data on the system. B. The system shows evidence of prior unauthorized compromise. C. The system shows a lack of hardening throughout. D. The system […]

A penetration tester has gained access to a marketing employee’s device. The penetration tester wants to

A penetration tester has gained access to a marketing employee’s device. The penetration tester wants to ensure that if the access is discovered, control of the device can be regained. Which of the following actions should the penetration tester use to maintain persistence to the device? (Select TWO.) A. Place an entry in HKLM\Software\Microsoft\CurrentVersion\Run to […]

A security analyst was provided with a detailed penetration report, which was performed against the organizati

A security analyst was provided with a detailed penetration report, which was performed against the organization’s DMZ environment. It was noted on the report that a finding has a CVSS base score of 10.0. Which of the following levels of difficulty would be required to exploit this vulnera-bility? A. Very difficult; perimeter systems are usually […]

Which of the following BEST describes some significant security weaknesses with an ICS, such as those used in

Which of the following BEST describes some significant security weaknesses with an ICS, such as those used in electrical utility facilities, natural gas facilities, dams, and nuclear facilities? A. ICS vendors are slow to implement adequate security controls. B. ICS staff are not adequately trained to perform basic duties. C. There is a scarcity of […]

A client has scheduled a wireless penetration test. Which of the following describes the scoping target inform

A client has scheduled a wireless penetration test. Which of the following describes the scoping target information MOST likely needed before testing can begin? A. The physical location and network ESSIDs to be tested B. The number of wireless devices owned by the client C. The client’s preferred wireless access point vendor D. The bands […]

A penetration tester has compromised a Windows server and is attempting to achieve persistence. Which of the f

A penetration tester has compromised a Windows server and is attempting to achieve persistence. Which of the following would achieve that goal? A. schtasks.exe /create/tr “powershell.exe” Sv.ps1 /run B. net session server | dsquery -user | net use c$ C. powershell && set-executionpolicy unrestricted D. reg save HKLM\System\CurrentControlSet\Services\Sv.reg

A manager calls upon a tester to assist with diagnosing an issue within the following Python script:

A manager calls upon a tester to assist with diagnosing an issue within the following Python script: #!/usr/bin/python s = “Administrator” The tester suspects it is an issue with string slicing and manipulation. Analyze the following code segment and drag and drop the correct output for each string manipulation to its corresponding code segment. Options […]


Page 20 of 461« First...10...1819202122...304050...Last »