Penetration Testing GCCC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a key component of a penetration testing report?

   • AA list of all tools used during the test, regardless of their relevance.
   • BThe names of all employees involved in the test.
   • CDetailed findings of vulnerabilities, including their risk rating and potential impact.
   • DA detailed log of every command executed during the test.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A penetration test has concluded, and the tester is writing the final report. The report includes a finding for a critical remote code execution vulnerability in an internet-facing application. The client's IT team has asked for enough detail to reproduce the issue during remediation verification. Which element should the tester include in the report to satisfy this request while maintaining professional standards?

   • AA step-by-step proof of concept with the exact commands and requests used
   • BA summary of the vulnerability and a recommendation to patch
   • CThe exploit code from a public exploit database
   • DA redacted version of the vulnerability scan output
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A penetration tester is using a vulnerability scanner to assess a network. The scanner reports a critical vulnerability in a web server. Before including this finding in the report, what should the tester do to ensure accuracy?

   • AImmediately include the finding in the report because the scanner is reliable
   • BManually verify the vulnerability by attempting to exploit it or reviewing the server configuration
   • CReport the finding as a potential issue without verification
   • DIgnore the finding because scanners are often wrong
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A penetration tester has successfully exploited a vulnerability in a Windows server and gained a low-privilege shell. The tester's goal is to move laterally to a domain controller. The tester finds that the current user has local administrator rights on the server but not domain admin rights. The tester also discovers that a service account with domain admin privileges is running on the server. Which post-exploitation technique would be most effective to achieve the goal?

   • AInstall a keylogger to capture the service account's password when it logs in
   • BAdd the current user to the Domain Admins group using the local admin shell
   • CReboot the server and boot into a password reset utility
   • DDump the service account's credentials from memory and use them to authenticate to the domain controller
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A penetration tester is assessing a web application that uses a content management system (CMS). The tester has identified a known remote code execution vulnerability in the CMS version, but the vulnerability requires authentication as an editor-level user. The tester has a valid editor account. The tester's goal is to gain a foothold on the underlying server. Which approach is most appropriate?

   • APerform a brute-force attack on the admin account to gain higher privileges
   • BUse the editor account to upload a malicious plugin or theme that executes code on the server
   • CRun a vulnerability scanner to confirm the vulnerability
   • DAttempt to exploit the vulnerability without authentication
   Reveal Solution Discussion Select an answer first