A penetration tester was brute forcing an internal web server and ran a command that produced the following output:

However, when the penetration tester tried to browse the URL http://172.16.100.10:3000/profile, a blank page was displayed.
Which of the following is the MOST likely reason for the lack of output?

• A.The web server is using HTTPS instead of HTTP.
• B.The tester did not run sudo before the command.
• C.This URI returned a server error.
• D.The HTTP port is not open on the firewall.

Comment: *

Name: *

Email: *

Verification: *

A penetration tester who is performing an engagement notices a specific host is vulnerable to EternalBlue.
Which of the following would BEST protect against this vulnerability?

• A.Network segmentation
• B.Key rotation
• C.Encrypted passwords
• D.Patch management

Comment: *

Name: *

Email: *

Verification: *

A penetration tester has been contracted to review wireless security. The tester has deployed a malicious wireless AP that mimics the configuration of the target enterprise WiFi. The penetration tester now wants to try to force nearby wireless stations to connect to the malicious AP. Which of the following steps should the tester take NEXT?

• A.Send deauthentication frames to the stations.
• B.Perform jamming on all 2.4GHz and 5GHz channels.
• C.Set the malicious AP to broadcast within dynamic frequency selection channels.
• D.Modify the malicious AP configuration to not use a pre-shared key.

Comment: *

Name: *

Email: *

Verification: *

A penetration tester captured the following traffic during a web-application test:

Which of the following methods should the tester use to visualize the authorization information being transmitted?

• A.Decode the authorization header using Base64.
• B.Decrypt the authorization header using AES.
• C.Decrypt the authorization header using bcrypt.
• D.Decode the authorization header using UTF-8.

Comment: *

Name: *

Email: *

Verification: *

The provision that defines the level of responsibility between the penetration tester and the client for preventing unauthorized disclosure is found in the:

• A.NDA
• B.SLA
• C.MSA
• D.SOW

Comment: *

Name: *

Email: *

Verification: *