Objective 1.1 Perform Reconnaissance on Target Systems and Networks. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A penetration tester is reviewing Nmap output and sees the following for a host: '21/tcp open ftp vsftpd 2.3.4' and '80/tcp open http Apache httpd 2.2.8'. The tester knows that vsftpd 2.3.4 has a known backdoor vulnerability. However, the tester is unsure if the service is actually vulnerable because the version might be a false positive. What should the tester do to confirm the vulnerability?

   • ATrust the version and immediately exploit the backdoor.
   • BPerform a full port scan to ensure no other services are running.
   • CUse Nmap's vulnerability scanning script, such as --script vuln, to check for the specific vulnerability.
   • DUse a web proxy to intercept FTP traffic and verify the banner.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A web application tester is using Burp Suite to intercept HTTPS traffic. The tester has configured the browser to use Burp as a proxy, but the browser displays a certificate warning. The tester needs to intercept the traffic without causing the browser to block the connection. What should the tester do?

   • AUse a different proxy tool that does not require certificate installation.
   • BDisable HTTPS interception and only intercept HTTP traffic.
   • CInstall Burp's CA certificate in the browser's trusted root certificate store.
   • DIgnore the warning and continue intercepting traffic.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which tool is specifically designed to discover hidden directories and files on a web server by brute-forcing common names?

   • AMetasploit
   • BGobuster
   • CWireshark
   • DNmap
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   A penetration tester wants to intercept and modify web traffic and also perform automated scanning for web vulnerabilities. Which tool is best suited for this combined task?

   • ANmap
   • BBurp Suite
   • CGobuster
   • DDirbuster
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A penetration tester is beginning an external assessment and needs to gather publicly available information about the target organization without directly interacting with its systems. The tester wants to collect employee names, email addresses, and technology stack details from public sources. Which technique should the tester use?

   • AEnumerating SMB shares
   • BFootprinting using search engines and social media
   • CIntercepting web traffic with a proxy
   • DPort scanning with Nmap
   Reveal Solution Discussion Select an answer first