Penetration Testing GCCC Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A penetration tester has gained access to a Windows workstation in a corporate network. The tester's goal is to reach a file server on a different subnet. The tester discovers that the workstation has a saved connection to the file server using a domain account. The tester does not have the password for that account. Which technique should the tester use to access the file server?

   • AReboot the workstation and boot into a password reset tool
   • BExtract the cached credentials for the saved connection and use them to authenticate to the file server
   • CPerform a brute-force attack on the file server's admin account
   • DUse the current user's credentials to access the file server
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A penetration tester is writing the final report. The tester wants to ensure that the client's IT team can quickly understand which vulnerabilities to fix first. What should the tester include in the report to achieve this?

   • AA detailed explanation of the testing methodology
   • BA list of all vulnerabilities sorted alphabetically
   • CA risk rating for each vulnerability with a recommended remediation priority
   • DThe raw output of the vulnerability scanner
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of including remediation recommendations in a penetration testing report?

   • ATo provide actionable steps to fix identified vulnerabilities and improve security.
   • BTo provide a timeline for the next penetration test.
   • CTo list all the tools used during the test.
   • DTo justify the cost of the penetration test.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is considering a penetration test to assess its security posture. The company has a limited budget and wants to focus on the most critical systems. The company also wants to ensure that the test is conducted in a way that minimizes the risk of disruption. Which type of penetration test would best meet these needs?

   • AA vulnerability scan that only identifies potential issues without exploitation
   • BA full-scope test that covers all systems and networks
   • CA red team exercise that simulates a full attack
   • DA targeted test that focuses on critical systems and uses safe testing techniques
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A penetration tester has identified a critical vulnerability in a third-party component used by the target application. The vendor has released a patch, but the client has not applied it due to compatibility concerns. The tester has a proof of concept that reliably exploits the vulnerability. The client's management wants to understand the real business risk. What should the tester do?

   • ADemonstrate the exploit in a controlled test environment and document the potential impact
   • BRecommend ignoring the vulnerability because the vendor patch is not applied
   • CReport the vulnerability as theoretical without demonstrating it
   • DExploit the vulnerability in production to prove the risk
   Reveal Solution Discussion Select an answer first