Confidently Practice Online with Free OSCP Exam Cram

Practice your Offensive Security (OffSec) Certified Professional (OSCP+) certification test with free OSCP exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real OSCP exam dumps, verified questions, and expert-designed free online practice tests. Moreover our OffSec OSCP exam cram backed by our confidence-boosting refund guarantee.

Question 1

What types of information can be gathered using Amass? (Select all that apply)

Options :

A : ASN (Autonomous System Numbers)

B : Subdomains

C : IP addresses

D : Passwords

Answer: A,B,C

Question 2

During a bug bounty assessment, you find a reflected XSS payload works only when clicking from an internal page and fails in direct request. What is likely protecting it?

Options :

A : HTTP-only cookie

B : CSRF token

C : Referer header validation

D : Content Security Policy

Answer: C

Question 3

Which LDAP attribute is typically used by attackers to identify accounts that never expire?

Options :

A : userAccountControl

B : msDS-AllowedToDelegateTo

C : servicePrincipalName

D : lastLogonTimestamp

Answer: A

Question 4

You find that your compromised user has GenericWrite over another domain user object. What privilege escalation path does this open?

Options :

A : Modify user’s password directly

B : Create a new user and add to Domain Admins

C : Add a malicious SPN to perform Kerberoasting

D : Modify user object to enable delegation

Answer: C

Question 5

During a red team assessment, you discover credentials belonging to a third-party vendor while scanning a misconfigured internal share. You are unsure whether accessing the vendor’s systems is within scope. What is the most appropriate action?

Options :

A : Attempt access to validate the credentials.

B : Notify your team lead or point of contact immediately.

C : Log the finding in your report and proceed with testing.

D : Contact the vendor directly to ask for permission.

Answer: B