Q. What is the challenge in discovering third-party–hosted assets in penetration testing?

View solution

Q. Which tool can assist penetration testers in discovering a target's cloud infrastructure for infrastructure-as-a-service (IaaS) providers like Amazon, Google, and Microsoft?

View solution

Q. What information can penetration testers gain by discovering storage buckets and applications in cloud environments?

View solution

Q. What is a common challenge faced by penetration testers when performing discovery in environments hosted by third parties or cloud service providers?

View solution

Q. Why is scoping more complex for modern penetration testers when compared to pentesters in the past?

View solution

Q. Why is analyzing code as part of an enumeration and information-gathering exercise important for penetration testers?

View solution

Q. Where is the most accessible information often found in code?

View solution

Q. What utility can be used in Linux to recover text strings from compiled code?

View solution

Q. In malware analysis, what utility is often useful once malware has been decoded from various packing methods that attempt to obfuscate the code?

View solution

Q. What is a shortcut that provides some useful information from compiled code without decompiling?

View solution

Q. In the context of penetration testing, when is the use of a debugger likely to be more relevant?

View solution

Q. Which tool has built-in capabilities intended to reduce the likelihood of detection by slowing down testing, randomizing ports, using multiple scanning systems or IP addresses, and faking source addresses?

View solution

Q. In what situations is the need to avoid detection typically determined in penetration testing?

View solution

Q. What is a common defense against active reconnaissance that relies on network defenses?

View solution

Q. What technology is a defensive measure against active reconnaissance to limit or stop probes and prevent scanning?

View solution

Q. What is critical for a penetration tester to monitor when conducting active reconnaissance activities to avoid detection?

View solution

Q. What is a challenge for organizations in preventing passive information gathering?

View solution

Q. What is one of the DNS protection techniques to prevent misuse of domain information in passive information gathering?

View solution

Q. What is passive reconnaissance, often referred to as open source intelligence (OSINT)?

View solution

Q. What is an example of a technique used in active reconnaissance?

View solution