Vulnerability Assessments and Penetration Testing ACCISO Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   After a vulnerability assessment, a security analyst has a list of findings. The analyst must write a report for both technical staff and senior management. Which approach best meets the needs of both audiences?

   • AProvide an executive summary with high-level risk ratings and a separate technical appendix with detailed findings.
   • BProvide a single detailed technical report with all raw scan data and CVSS scores.
   • CProvide only a list of vulnerabilities with their CVSS scores and no remediation recommendations.
   • DProvide a verbal presentation to management and email the raw scan report to technical staff.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   During a penetration test, the tester discovers that the target network uses a new endpoint protection platform that blocks common exploitation techniques. The tester must find an alternative way to exploit a vulnerability without being detected. Which phase of the penetration test is the tester in, and what is the best approach?

   • AReporting phase; document the inability to exploit the vulnerability
   • BExploitation phase; use a custom payload or obfuscation technique to bypass the endpoint protection
   • CReconnaissance phase; gather more information about the endpoint protection
   • DPost-exploitation phase; maintain access by disabling the endpoint protection
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   During a penetration test, the tester gains access to a low-privileged account on a Windows server. The tester wants to escalate privileges to domain administrator. The tester has already enumerated the domain and identified a misconfigured service running as SYSTEM. Which phase and tool combination is most appropriate?

   • AReporting phase, using Burp Suite to document the finding.
   • BPost-exploitation phase, using Metasploit's exploit module to exploit the misconfigured service.
   • CReconnaissance phase, using Wireshark to capture credentials.
   • DExploitation phase, using Nmap to scan for open ports.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A penetration tester is performing a web application test. The tester has identified a potential SQL injection vulnerability in a login form. To confirm the vulnerability without causing damage, the tester wants to send a payload that will not modify data. Which tool and technique is most appropriate?

   • AUse Wireshark to capture the login request and analyze it for SQL injection.
   • BUse Metasploit to launch a full exploit that drops a web shell.
   • CUse Burp Suite to intercept the request and manually modify the parameter with a benign payload like ' OR '1'='1'.
   • DUse Nmap to scan the web server for SQL injection vulnerabilities.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the purpose of the post-exploitation phase in a penetration test?

   • ATo determine the value and impact of the compromised system
   • BTo patch the vulnerabilities that were exploited
   • CTo write the final report
   • DTo identify vulnerabilities in the target system
   Reveal Solution Discussion Select an answer first