Objective 1.1 Perform Reconnaissance on Target Systems and Networks. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a primary function of a web proxy in web application testing?

   • AIdentifying the operating system of a host
   • BEnumerating user accounts on a network
   • CDiscovering open ports on a server
   • DIntercepting and modifying HTTP/HTTPS traffic
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In Nmap output, what does the port state 'filtered' indicate?

   • AThe port is open and a service is running.
   • BThe port is closed and no service is running.
   • CA firewall or other network device is blocking the port.
   • DThe port is open but not responding.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A web application tester is using Burp Suite to intercept traffic between a browser and a target web application. The tester needs to capture and modify requests before they reach the server to test for parameter tampering. Which Burp Suite tool should the tester use?

   • ASpider
   • BIntruder
   • CProxy
   • DRepeater
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A penetration tester has identified an open SMB port (445) on a Windows server during a scan. The tester now wants to extract a list of user accounts and shared folders from the SMB service to build a target profile. Which tool or technique is most appropriate for this task?

   • ARun Nmap with the --script smb-enum-users and smb-enum-shares scripts.
   • BUse a web proxy to intercept SMB traffic.
   • CRun a UDP scan on port 445.
   • DPerform a ping sweep to identify additional hosts.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   While analyzing intercepted web traffic, a tester notices a parameter named 'sessionid' in the HTTP headers. What is the significance of this finding?

   • AIt reveals the operating system of the server.
   • BIt shows the target's IP address.
   • CIt may be a session token that could be targeted for session hijacking.
   • DIt indicates the server is vulnerable to SQL injection.
   Reveal Solution Discussion Select an answer first