Question 326

A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key findings are as follows:
* The following request was intercepted going to the network device:
GET /login HTTP/1.1
Host: 10.50.100.16
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Authorization: Basic WU9VUilOQU1FOnNlY3JldHBhc3N3b3jk
* Network management interfaces are available on the production network.
* An Nmap scan returned the following:

Which of the following would be BEST to add to the recommendations section of the final report? (Choose two.)
  • Question 327

    A penetration tester writes the following script:

    Which of the following objectives is the tester attempting to achieve?
  • Question 328

    A security analyst needs to perform an on-path attack on BLE smart devices. Which of the following tools would be BEST suited to accomplish this task?
  • Question 329

    A penetration tester uncovers access keys within an organization's source code management solution. Which of the following would BEST address the issue? (Choose two.)
  • Question 330

    A penetration tester gains access to a system and establishes persistence, and then runs the following commands:
    cat /dev/null > temp
    touch -r .bash_history temp
    mv temp .bash_history
    Which of the following actions is the tester MOST likely performing?