Question 1

Fill in the blank: The most common file used by attackers to discover subdomains through DNS is called a _______ list.

Options :

A : brute force

B : wordlist

C : dictionary

D : subnames

Answer: C

Question 2

During a penetration test, a payload needs to be developed to maintain persistence on the target system after reboot. Which technique can be embedded in the payload for this purpose?

Options :

A : Registry key modification for startup execution

B : Scheduled task creation for session renewal

C : dding the payload to the authorized_keys file

D : mbedding the payload in a cron job

Answer: A

Question 3

Which command sequence is effective for escalating privileges using a known vulnerable service on Linux?

Options :

A : chmod +s /bin/bash; /bin/bash -p

B : touch /tmp/evil; echo 'cp /bin/sh /tmp/sh; chmod +s /tmp/sh' > /tmp/evil

C : ls /tmp -l; chmod 777 /tmp/exploit.sh; /tmp/exploit.sh

D : find / -perm -4000 -exec ls -ldb {} ;

Answer: D

Question 4

How should you describe a critical vulnerability found in a client's network infrastructure within the report to ensure proper attention?

Options :

A : emphasize the theoretical possibility of exploiting the vulnerability without real-world examples.

B : describe the vulnerability using technical jargon to ensure only knowledgeable personnel understand.

C : Highlight the speed and ease with which the vulnerability could be exploited without detailing its impact.

D : clearly state the vulnerability-s potential to allow unauthorized access and the impact of data breaches.

Answer: D

Question 5

Which command would initiate a YARA rule scan to detect malware signatures and unauthorized access tools on a network file system?

Options :

A : clamscan --database=/path/to/rules --recursive /network/shared/drives/

B : grep -ri 'malware' /network/shared/drives/

C : nmap --script yara.rules -p445 /network/shared/drives/

D : yara -r -p 20 /path/to/rules /network/shared/drives/

Answer: D

Confidently Practice Online with Free CPENT Exam Cram

Buying Options: