WGU D484 DKN1 PENETRATION ANALYSIS
PRACTICE EXAMINATION 2026
QUESTIONS WITH ANSWERS GRADED A+
◍ PTES.
Answer: The Penetration Testing Execution Standard (PTES) has seven
main sections that provide a comprehensive overview of the proper structure
of a complete PenTest. Some of the sections include details on topics such
as pre-engagement interactions, threat modeling, vulnerability analysis,
exploitation, and reporting.
◍ A penetration tester is using a framework to help manage available exploits
and keep control of the devices the tester has targeted. What kind of
framework is the tester using to accomplish this?
A. C2
B. BeEF
C. SQLi
D. LDAP.
Answer: A.C2The command and control (C2) frameworks manage available
exploits, as well as help penetration testers keep control of the devices the
tester has targeted.The Browser Exploit Framework (or simply "BeEF")
focuses on web browser attacks, which means exploiting some functionality
or vulnerability on the browser.SQLi is a SQL injection attack that allows
the modification of any of the four basic functions of SQL querying by
embedding code within the web application, causing it to execute your own
set of queries using SQL.The Lightweight Directory Access Protocol
(LDAP) is a standard for networked devices on how to manage directory
services.
◍ A software developer wants to ensure he is performing adequate security
, testing of the software at each stage of development. What organization
website can the developer visit for open-source tools and testing guidelines?.
Answer: Open Web Application Security Project (OWASP)
◍ What is the purpose of using advanced search operators in the context of
Google Hacking, and how do they enhance the effectiveness of search
queries?.
Answer: To refine search results by focusing on specific types of
information and reducing irrelevant results
◍ The General Data Protection Regulation (GDPR) sets certain requirements
on protecting consumer data. A business that deals with residents of the EU
and Britain must remain compliant with the GDP
R. Which option must be given to customers to meet this
requirement?Customers must be given the right to be forgotten.Customers
must sign a non-disclosure agreement.Customers must be able to turn off
cookies when doing business on a vendor's website.Customers must be able
to choose the level of security they want their data to be protected under..
Answer: Customers must be given the right to be forgotten.
◍ As a security analyst, you are using Metasploit to test the security of a web
application. You need to perform additional tasks on a compromised host
after successfully exploiting it. Which metasploit module type should you
use?.
Answer: Post
◍ A network contractor is setting up wireless for a small coffee shop and
wants to make sure they are secured with a standard that uses 192-bit
encryption. Which of the following should they use?
A. WEP
B. WPA
C. WPA2
D. WPA3.
Answer: D.WPA3WPA3 includes advanced features to secure wireless
transmissions such as 192-bit encryption when using WPA3-Enterprise
, mode (used in business LANs).
◍ A security engineer is trying to understand the default behavior of nmap
scans during host discovery. What does nmap send to port 80?
A. TCP ACK
B. TCP SYN
C. Echo request
D. ARP request.
Answer: A.TCP ACKDuring host discovery, nmap sends a TCP ACK
packet to port 80. A TCP ACK scan is used to bypass firewall rulesets,
determine which ports are filtered, and if a firewall is stateful or not.
◍ A penetration tester wants to try keeping multiple fake web connections
open for as long as possible, until the maximum number of allowed
connections is reached. They want to employ this method on a test server to
see how much they will be able to handle before needing to scale outwards.
What type of attack should they use to test this?
A. HTTP flood
B. Slowloris
C. DNS amplification
D. Prowler.
Answer: B.SlowlorisA slowloris attack keeps multiple fake web connections
open for as long as possible until the maximum number of allowed
connections is reached.
◍ A Jr. pen tester has difficulty using a Bash script. The script contains the
following line: $my_str="Password", which throws an error. What does a
senior testing identify as the problem?.
Answer: the use of '$'
◍ A penetration tester needs to craft a custom packet in order to bypass an
Intrusion Prevention System (IPS). What tools could they use to craft
custom packets? (Select all that apply.)
A. OpenVAS
B. Metagoofil
, C. Scapy
D. Hping3.
Answer: C.ScapyD.Hping3Scapy is a tool to craft and send a malformed
packet to your target. The type of packet crafted will be dependent on
security products and rules.Hping3 is also a tool to craft and send a
malformed packet to your target. For example, the Christmas (XMAS) scan
might be able to bypass security mechanisms that follow strict interpretation
of RFC 793.
◍ A PenTester is writing a script to shred data on drives by overwriting the
storage with new data several times. Which of the following statements are
true when it comes to shredding data on drives? (Select all that apply.)
A. Shredding data on HDDs is slower because the write algorithm reduces
wear
B. Shredding data on HDDs is faster because the write process is more
reliable
C. Shredding data on SSDs is slower because the write algorithm reduces
wear
D. Shredding data on SSDs is faster because the write process is more
reliable.
Answer: B.Shredding data on HDDs is faster because the write process is
more reliableC.Shredding data on SSDs is slower because the write
algorithm reduces wear
◍ You need to quickly identify live hosts on the network and check for any
potential firewall rules blocking your discovery without performing a full
scan. Which of the following NMAP scan options should you use?.
Answer: nmap -sn 192.168.1.1/24
◍ Which of the following commands would you use to gather banner
information from a web server running on port 80?.
Answer: curl -I <target IP>
◍ OllyDbg.
Answer: OllyDbg is a debugger included with Kali Linux that analyzes
PRACTICE EXAMINATION 2026
QUESTIONS WITH ANSWERS GRADED A+
◍ PTES.
Answer: The Penetration Testing Execution Standard (PTES) has seven
main sections that provide a comprehensive overview of the proper structure
of a complete PenTest. Some of the sections include details on topics such
as pre-engagement interactions, threat modeling, vulnerability analysis,
exploitation, and reporting.
◍ A penetration tester is using a framework to help manage available exploits
and keep control of the devices the tester has targeted. What kind of
framework is the tester using to accomplish this?
A. C2
B. BeEF
C. SQLi
D. LDAP.
Answer: A.C2The command and control (C2) frameworks manage available
exploits, as well as help penetration testers keep control of the devices the
tester has targeted.The Browser Exploit Framework (or simply "BeEF")
focuses on web browser attacks, which means exploiting some functionality
or vulnerability on the browser.SQLi is a SQL injection attack that allows
the modification of any of the four basic functions of SQL querying by
embedding code within the web application, causing it to execute your own
set of queries using SQL.The Lightweight Directory Access Protocol
(LDAP) is a standard for networked devices on how to manage directory
services.
◍ A software developer wants to ensure he is performing adequate security
, testing of the software at each stage of development. What organization
website can the developer visit for open-source tools and testing guidelines?.
Answer: Open Web Application Security Project (OWASP)
◍ What is the purpose of using advanced search operators in the context of
Google Hacking, and how do they enhance the effectiveness of search
queries?.
Answer: To refine search results by focusing on specific types of
information and reducing irrelevant results
◍ The General Data Protection Regulation (GDPR) sets certain requirements
on protecting consumer data. A business that deals with residents of the EU
and Britain must remain compliant with the GDP
R. Which option must be given to customers to meet this
requirement?Customers must be given the right to be forgotten.Customers
must sign a non-disclosure agreement.Customers must be able to turn off
cookies when doing business on a vendor's website.Customers must be able
to choose the level of security they want their data to be protected under..
Answer: Customers must be given the right to be forgotten.
◍ As a security analyst, you are using Metasploit to test the security of a web
application. You need to perform additional tasks on a compromised host
after successfully exploiting it. Which metasploit module type should you
use?.
Answer: Post
◍ A network contractor is setting up wireless for a small coffee shop and
wants to make sure they are secured with a standard that uses 192-bit
encryption. Which of the following should they use?
A. WEP
B. WPA
C. WPA2
D. WPA3.
Answer: D.WPA3WPA3 includes advanced features to secure wireless
transmissions such as 192-bit encryption when using WPA3-Enterprise
, mode (used in business LANs).
◍ A security engineer is trying to understand the default behavior of nmap
scans during host discovery. What does nmap send to port 80?
A. TCP ACK
B. TCP SYN
C. Echo request
D. ARP request.
Answer: A.TCP ACKDuring host discovery, nmap sends a TCP ACK
packet to port 80. A TCP ACK scan is used to bypass firewall rulesets,
determine which ports are filtered, and if a firewall is stateful or not.
◍ A penetration tester wants to try keeping multiple fake web connections
open for as long as possible, until the maximum number of allowed
connections is reached. They want to employ this method on a test server to
see how much they will be able to handle before needing to scale outwards.
What type of attack should they use to test this?
A. HTTP flood
B. Slowloris
C. DNS amplification
D. Prowler.
Answer: B.SlowlorisA slowloris attack keeps multiple fake web connections
open for as long as possible until the maximum number of allowed
connections is reached.
◍ A Jr. pen tester has difficulty using a Bash script. The script contains the
following line: $my_str="Password", which throws an error. What does a
senior testing identify as the problem?.
Answer: the use of '$'
◍ A penetration tester needs to craft a custom packet in order to bypass an
Intrusion Prevention System (IPS). What tools could they use to craft
custom packets? (Select all that apply.)
A. OpenVAS
B. Metagoofil
, C. Scapy
D. Hping3.
Answer: C.ScapyD.Hping3Scapy is a tool to craft and send a malformed
packet to your target. The type of packet crafted will be dependent on
security products and rules.Hping3 is also a tool to craft and send a
malformed packet to your target. For example, the Christmas (XMAS) scan
might be able to bypass security mechanisms that follow strict interpretation
of RFC 793.
◍ A PenTester is writing a script to shred data on drives by overwriting the
storage with new data several times. Which of the following statements are
true when it comes to shredding data on drives? (Select all that apply.)
A. Shredding data on HDDs is slower because the write algorithm reduces
wear
B. Shredding data on HDDs is faster because the write process is more
reliable
C. Shredding data on SSDs is slower because the write algorithm reduces
wear
D. Shredding data on SSDs is faster because the write process is more
reliable.
Answer: B.Shredding data on HDDs is faster because the write process is
more reliableC.Shredding data on SSDs is slower because the write
algorithm reduces wear
◍ You need to quickly identify live hosts on the network and check for any
potential firewall rules blocking your discovery without performing a full
scan. Which of the following NMAP scan options should you use?.
Answer: nmap -sn 192.168.1.1/24
◍ Which of the following commands would you use to gather banner
information from a web server running on port 80?.
Answer: curl -I <target IP>
◍ OllyDbg.
Answer: OllyDbg is a debugger included with Kali Linux that analyzes
