Question 1

What command would you use to perform subdomain enumeration using the Amass tool for the domain "example.com"?

Options :

A : amass search -v -d example.com

B : amass -enum -domain example.com

C : amass scan -domain example.com

D : amass enum -d example.com

Answer: D

Question 2

In a scenario where you suspect that an API's session tokens are not properly validated, which technique would you use to test the effectiveness of the API's session management?

Options :

A : Modify the API key in the header to see if the response changes

B : force session expiration by sending requests at rapid intervals

C : attempt session replay by reusing a captured valid session token to perform unauthorized actions

D : Use an invalidated token to access the API and monitor for unauthorized data retrieval

Answer: C

Question 3

Which command would you use to test the ability to move between different network zones?

Options :

A : sudo nmap --packet-trace -p 1-65535 192.168.1.0/24

B : traceroute -T --port=80 192.168.100.1

C : ping 192.168.2.1 -t -l 1400

D : netstat -an | grep ESTABLISHED

Answer: A

Question 4

During an exploitation attempt on a zero-day vulnerability, which approach is effective for gaining unauthorized access to a system?

Options :

A : Use of tailored buffer overflow in the system’s application layer

B : Sending phishing emails to employees to obtain network credentials

C : Installing malware through third-party software updates

D : eploying a denial of service attack to disrupt the network

Answer: A

Question 5

Which tool would allow an auditor to intercept and modify network traffic to test network segmentation?

Options :

A : Wireshark, because it can capture and analyze live network traffic on multiple protocols.

B : TCPDump, because it can log traffic that passes over a network interface.

C : ain & Abel, because it is capable of recording VoIP conversations and revealing password boxes.

D : Metasploit, because it allows for the creation and execution of exploits against a target network.

Answer: A

Confidently Practice Online with Free CPENT Exam Cram

Buying Options: