QUESTION: 21

A penetration tester completed a vulnerability scan against a web server and identified a single but severe vulnerability.
Which of the following is the BEST way to ensure this is a true positive?

Run another scanner to compare.
Perform a manual test on the server.
Check the results on the scanner.
Look for the vulnerability online.

Answer(s): B

Reveal Solution Next Question

QUESTION: 22

A penetration tester has been given eight business hours to gain access to a client's financial system.
Which of the following techniques will have the HIGHEST likelihood of success?

Attempting to tailgate an employee who is going into the client's workplace
Dropping a malicious USB key with the company's logo in the parking lot
Using a brute-force attack against the external perimeter to gain a foothold
Performing spear phishing against employees by posing as senior management

Answer(s): D

Reveal Solution Next Question

A company's Chief Executive Officer has created a secondary home office and is concerned that the WiFi service being used is vulnerable to an attack. A penetration tester is hired to test the security of the WiFi's router.
Which of the following is MOST vulnerable to a brute-force attack?