Penetration Testing GCCC Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A penetration test has been completed, and the tester is preparing the executive summary for the final report. The audience is senior management who are not technical. Which information should the tester prioritize in the executive summary?

   • AA high-level overview of the most critical risks and their potential business impact
   • BA copy of the raw vulnerability scan output
   • CA detailed list of all vulnerabilities with CVSS scores
   • DThe exact exploit commands used during the test
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A penetration tester has completed passive reconnaissance on a client's network and now needs to identify which services are exposed and whether any known vulnerabilities exist. The client has approved active scanning but requested that the tester minimize the risk of disrupting production services. Which approach best satisfies the client's constraint?

   • AUse only passive techniques to infer vulnerabilities from banner information
   • BSkip the port scan and directly run an exploit framework against the target's IP address
   • CPerform a targeted port scan of common ports and then run a vulnerability scanner configured with safe checks
   • DRun a full port scan on all 65,535 ports and then launch a vulnerability scanner with default settings
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   During a penetration test, a tester identifies a web application that is vulnerable to command injection. The tester successfully executes a command to read a local file. What is the most appropriate next step in the exploitation phase?

   • ADocument the vulnerability and the successful exploitation
   • BImmediately move to lateral movement to other systems
   • CAttempt to escalate privileges on the target system
   • DStop the test and report the vulnerability to the client
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the goal of exploitation in a penetration test?

   • ATo monitor network traffic for malicious activity.
   • BTo patch vulnerabilities found during scanning.
   • CTo identify vulnerabilities without actually exploiting them.
   • DTo gain unauthorized access to a system by leveraging identified vulnerabilities.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   During a penetration test, a tester discovers that a web application is vulnerable to SQL injection. The tester successfully extracts the database version and a list of usernames. According to a typical penetration testing methodology, what should the tester do next before proceeding further?

   • ADocument the finding and verify that the exploitation is within the approved scope
   • BImmediately exploit the vulnerability to gain a shell on the database server
   • CReport the vulnerability to the client and stop the test
   • DMove to post-exploitation activities such as privilege escalation
   Reveal Solution Discussion Select an answer first