Which of the following documents describes activities that are prohibited during a scheduled penetration test?

• A.MSA
• B.NDA
• C.ROE
• D.SLA

Comment: *

Name: *

Email: *

Verification: *

A tester wants to pivot from a compromised host to another network with encryption and the least amount of interaction with the compromised host. Which of the following is the best way to accomplish this objective?

• A.Create an SSH tunnel using sshuttle to forward all the traffic to the compromised computer.
• B.Configure a VNC server on the target network and access the VNC server from the compromised computer.
• C.Set up a Metasploit listener on the compromised computer and create a reverse shell on the target network.
• D.Create a Netcat connection to the compromised computer and forward all the traffic to the target network.

Comment: *

Name: *

Email: *

Verification: *

A company recruited a penetration tester to configure wireless IDS over the network. Which of the following tools would BEST test the effectiveness of the wireless IDS solutions?

• A.Aircrack-ng
• B.Wireshark
• C.Wifite
• D.Kismet

Comment: *

Name: *

Email: *

Verification: *

A penetration tester launches an attack against company employees. The tester clones the company's intranet login page and sends the link via email to all employees.
Which of the following best describes the objective and tool selected by the tester to perform this activity?

• A.Gaining remote access using BeEF
• B.Obtaining the list of email addresses using theHarvester
• C.Harvesting credentials using SET
• D.Launching a phishing campaign using GoPhish

Comment: *

Name: *

Email: *

Verification: *

During a security assessment, a penetration tester captures plaintext login credentials on the communication between a user and an authentication system. The tester wants to use this information for further unauthorized access.
Which of the following tools is the tester using?

• A.Burp Suite
• B.Wireshark
• C.Zed Attack Proxy (ZAP)
• D.Metasploit

Comment: *

Name: *

Email: *

Verification: *