PEN2607 Exam All round Questions and Answers
Revised and Approved
A business hires a PenTest team with a concern that wireless access points (AP) are vulnerable to
an insider attack. Which tool do the testers use to gain access to an AP? - CORRECT ANSWER
✔✔ -Aireplay-ng
A client comments on a PenTest report by stating the amazement of how much information was
found by the team. The client asks which tool was used to find subdomains and their respective
directories. Which tool does the PenTester explain? - CORRECT ANSWER ✔✔ -Gobuster
A Jr. PenTester has difficulty using a Bash script. The script contains the following line $my_str
= "Password" which keeps throwing an error. What does a senior PenTester identify as the
problem? (Select all that apply.) - CORRECT ANSWER ✔✔ -The use of $
The use of =
A new business that processes credit card transactions must complete a report on compliance
(RoC). What security rank does the business meet? (Select all that apply.) - CORRECT
ANSWER ✔✔ -Level 1
Level 2
A new PenTester looks for a command and control (C2) tool that will work with Mac OS. Which
tool does an experienced test suggest? - CORRECT ANSWER ✔✔ -Mythic
, A new receptionist at a financial firm answers a call from someone that claims to be a remote
employee. The caller tries to obtain user account information of another employee with a claim
that such information is allowed to be given to a Vice President of the firm. Which social
engineering techniques does the caller use? (Select all that apply.) - CORRECT ANSWER ✔✔ -
Request
Interrogation
A PenTest engagement focuses on a particular server at a host organization. The server contains
critical information and is of the highest priority to harden. What engagement type do the
PenTesters utilize? (Select all that apply.) - CORRECT ANSWER ✔✔ -Goals
Objectives
A PenTest exercise has concluded. The team now addresses which area? - CORRECT ANSWER
✔✔ -Shell Removal
A PenTest group performs an assessment exercise at a client location. If the exercise involves an
attack and a response, which assessment approach does the group use when sending fragment
data across the network? - CORRECT ANSWER ✔✔ -Teams
A PenTest group performs an assessment exercise for a small business. If the exercise targets a
particular subnet that is for VIP use only, which assessment approach does the group use when
planning an attack? (Select all that apply.) - CORRECT ANSWER ✔✔ -Goals
Objectives
Revised and Approved
A business hires a PenTest team with a concern that wireless access points (AP) are vulnerable to
an insider attack. Which tool do the testers use to gain access to an AP? - CORRECT ANSWER
✔✔ -Aireplay-ng
A client comments on a PenTest report by stating the amazement of how much information was
found by the team. The client asks which tool was used to find subdomains and their respective
directories. Which tool does the PenTester explain? - CORRECT ANSWER ✔✔ -Gobuster
A Jr. PenTester has difficulty using a Bash script. The script contains the following line $my_str
= "Password" which keeps throwing an error. What does a senior PenTester identify as the
problem? (Select all that apply.) - CORRECT ANSWER ✔✔ -The use of $
The use of =
A new business that processes credit card transactions must complete a report on compliance
(RoC). What security rank does the business meet? (Select all that apply.) - CORRECT
ANSWER ✔✔ -Level 1
Level 2
A new PenTester looks for a command and control (C2) tool that will work with Mac OS. Which
tool does an experienced test suggest? - CORRECT ANSWER ✔✔ -Mythic
, A new receptionist at a financial firm answers a call from someone that claims to be a remote
employee. The caller tries to obtain user account information of another employee with a claim
that such information is allowed to be given to a Vice President of the firm. Which social
engineering techniques does the caller use? (Select all that apply.) - CORRECT ANSWER ✔✔ -
Request
Interrogation
A PenTest engagement focuses on a particular server at a host organization. The server contains
critical information and is of the highest priority to harden. What engagement type do the
PenTesters utilize? (Select all that apply.) - CORRECT ANSWER ✔✔ -Goals
Objectives
A PenTest exercise has concluded. The team now addresses which area? - CORRECT ANSWER
✔✔ -Shell Removal
A PenTest group performs an assessment exercise at a client location. If the exercise involves an
attack and a response, which assessment approach does the group use when sending fragment
data across the network? - CORRECT ANSWER ✔✔ -Teams
A PenTest group performs an assessment exercise for a small business. If the exercise targets a
particular subnet that is for VIP use only, which assessment approach does the group use when
planning an attack? (Select all that apply.) - CORRECT ANSWER ✔✔ -Goals
Objectives
