Objective 1.1 Perform Reconnaissance on Target Systems and Networks. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A penetration tester is using Dirbuster to discover hidden directories on a web server. The tester has a large wordlist and wants to speed up the process without missing directories. The tester also wants to save the results in a structured format for later analysis. Which approach is most effective?

   • AUse Dirbuster with a single thread to avoid detection.
   • BUse Dirbuster with a recursive scan and save the output to an HTML report.
   • CUse Dirbuster with multiple threads and save the output to a CSV file.
   • DUse Dirbuster with the default wordlist and save the output to a text file.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   During an internal penetration test, a tester discovers an open port on a server. The tester needs to determine the exact service and version running on that port to identify potential vulnerabilities. The tester also wants to know the operating system of the host. Which Nmap command should the tester use?

   • Anmap -sT <target>
   • Bnmap -sU <target>
   • Cnmap -p- <target>
   • Dnmap -sV -O <target>
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   During the initial phase of a penetration test, the tester wants to gather information about the target organization without sending any packets directly to its systems. Which activity best describes this approach?

   • AFingerprinting
   • BFootprinting
   • CEnumeration
   • DScanning
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A tester intercepts a web request and sees the following: GET /login?user=admin&pass=12345 HTTP/1.1. What potential security weakness does this reveal?

   • ASensitive data transmitted in URL parameters
   • BThe application is vulnerable to XSS
   • CThe server has an open port 443
   • DThe server is running an outdated OS
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   After discovering an open SMB port on a target, a tester connects to the service and lists shared folders and user accounts. Which reconnaissance phase is this?

   • AEnumeration
   • BScanning
   • CFootprinting
   • DFingerprinting
   Reveal Solution Discussion Select an answer first