Penetration Testing Essential Concepts CPENT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which framework is specifically focused on web application security and provides a list of the most critical risks?

   • AOWASP Top 10
   • BOSSTMM
   • CISO/IEC 27001
   • DPTES
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   After completing a penetration test, the tester must deliver a report to a mixed audience of executives, IT managers, and technical staff. What is the most effective way to structure the report to meet the needs of all stakeholders?

   • AInclude an executive summary with business impact and a separate technical section with detailed findings
   • BProvide a single technical report with detailed exploit steps and raw logs
   • CFocus only on the vulnerabilities and their CVSS scores
   • DPresent the report orally and provide no written documentation
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A penetration tester has completed the active exploitation phase and successfully gained access to a domain controller. According to the standard penetration testing phases, what should the tester do NEXT?

   • APerform post-exploitation activities such as privilege escalation, lateral movement, and data exfiltration simulation
   • BNotify the client that the test is complete
   • CImmediately begin writing the final report
   • DClean up all artifacts and remove access from the system
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A penetration tester has completed an engagement and is writing the final report. The tester wants to ensure that the report is useful for the client's development team. Which element is most important to include for the development team to effectively remediate the identified vulnerabilities?

   • AA step-by-step reproduction guide and remediation recommendations for each vulnerability
   • BA risk rating for each vulnerability based on the CVSS score
   • CA list of all the tools used during the penetration test
   • DA detailed executive summary that highlights the business impact
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A penetration tester is contracted to assess a healthcare organization's network. The rules of engagement (RoE) specify that testing is limited to the IP range 10.10.10.0/24 and is authorized only between 2 AM and 6 AM on weekends. During the test, the tester discovers that a critical database server on 10.10.20.15 is accessible from the authorized range and appears to contain unencrypted patient records. The tester believes this server is part of the organization's production environment and is highly vulnerable. The client's primary objective is to identify risks to patient data confidentiality. What is the most appropriate action for the tester to take?

   • ATest the server only for read-only access to prove the vulnerability without causing damage
   • BStop testing, document the discovery, and request an extension of scope from the client before proceeding
   • CImmediately test the database server because it is a critical finding that aligns with the client's primary objective
   • DInclude the database server in the final report as a vulnerability found during the test
   Reveal Solution Discussion Select an answer first