Penetration Testing GCCC Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which technique is considered active reconnaissance?

   • AReviewing the target's website for contact information.
   • BSearching DNS records using public databases.
   • CPerforming a port scan to identify open ports on a target server.
   • DReading job postings to identify technology stack.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is an example of an exploitation technique?

   • ARunning a vulnerability scanner to identify open ports.
   • BCreating a report of identified vulnerabilities.
   • CReviewing public DNS records to find subdomains.
   • DSQL injection to bypass authentication and access a database.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A penetration test has identified a medium-risk vulnerability in an internal application. The client's development team is unsure how to remediate it. The penetration tester has verified that the vulnerability is real and has a clear fix. What should the tester include in the report to best assist the development team?

   • AA detailed remediation section with specific configuration changes or code fixes
   • BA copy of the raw vulnerability scan output
   • CA note that the vulnerability is low priority and can be ignored
   • DA recommendation to replace the application with a commercial product
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A penetration tester is scanning a target network and discovers an open port 22 on a server. The tester wants to identify the exact version of the SSH service running to check for known vulnerabilities. Which technique should the tester use?

   • APerform a DNS lookup on the server's hostname
   • BConnect to the SSH port and read the banner
   • CSearch the target's website for SSH version information
   • DRun a vulnerability scan without authenticating
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is an example of passive reconnaissance?

   • AUsing a vulnerability scanner to identify open ports and services.
   • BSending ICMP echo requests to a target host to determine if it is alive.
   • CRunning a port scan against the target's network.
   • DSearching public records and social media for employee names and email addresses.
   Reveal Solution Discussion Select an answer first