QUESTION: 45

A penetration tester is able to capture the NTLM challenge-response traffic between a client and a server.
Which of the following can be done with the pcap to gain access to the server?

Perform vertical privilege escalation.
Replay the captured traffic to the server to recreate the session.
Use John the Ripper to crack the password.
Utilize a pass-the-hash attack.

Answer(s): D

Reveal Solution Next Question

QUESTION: 46

Which of the following documents describes specific activities, deliverables, and schedules for a penetration tester?

NDA
MSA
SOW
MOU

Answer(s): C

Reveal Solution Next Question

A penetration tester is exploring a client's website. The tester performs a curl command and obtains the following:
Which of the following tools would be BEST for the penetration tester to use to explore this site further?

Burp Suite
DirBuster
WPScan
OWASP ZAP

Answer(s): C

Reveal Solution Next Question

QUESTION: 48

DRAG DROP (Drag and Drop is not supported)
During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan.
INSTRUCTIONS
Analyze the code segments to determine which sections are needed to complete a port scanning script.
Drag the appropriate elements into the correct locations to complete the script.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Select and Place: