Question 286

A penetration-testing team needs to test the security of electronic records in a company's office. Per the terms of engagement, the penetration test is to be conducted after hours and should not include circumventing the alarm or performing destructive entry. During outside reconnaissance, the team sees an open door from an adjoining building. Which of the following would be allowed under the terms of the engagement?
  • Question 287

    In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including full names, roles, and serial numbers. The tester realizes some of the passwords in the text file follow the format: <name- serial_number>. Which of the following would be the best action for the tester to take NEXT with this information?
  • Question 288

    During a penetration test, a tester is in close proximity to a corporate mobile device belonging to a network administrator that is broadcasting Bluetooth frames.
    Which of the following is an example of a Bluesnarfing attack that the penetration tester can perform?
  • Question 289

    After gaining access to a previous system, a penetration tester runs an Nmap scan against a network with the following results:

    The tester then runs the following command from the previous exploited system, which fails:
    Which of the following explains the reason why the command failed?
  • Question 290

    A company becomes concerned when the security alarms are triggered during a penetration test. Which of the following should the company do NEXT?