Question 311

A penetration tester is attempting to discover live hosts on a subnet quickly.
Which of the following commands will perform a ping scan?
  • Question 312

    During an assessment, a penetration tester obtains a list of 30 email addresses by crawling the target company's website and then creates a list of possible usernames based on the email address format. Which of the following types of attacks would MOST likely be used to avoid account lockout?
  • Question 313

    Which of the following should a penetration tester consider FIRST when engaging in a penetration test in a cloud environment?
  • Question 314

    A penetration tester is looking for a vulnerability that enables attackers to open doors via a specialized TCP service that is used for a physical access control system. The service exists on more than 100 different hosts, so the tester would like to automate the assessment. Identification requires the penetration tester to:
    Have a full TCP connection
    Send a "hello" payload
    Walt for a response
    Send a string of characters longer than 16 bytes
    Which of the following approaches would BEST support the objective?
  • Question 315

    A penetration tester has been hired to configure and conduct authenticated scans of all the servers on a software company's network. Which of the following accounts should the tester use to return the MOST results?