WGU D484 PENETRATION TESTING COMPLETE
STUDY GUIDE WITH SOLVED QUESTIONS
◉ A security professional is setting up a netcat listener but they
want to start up in UDP instead of TCP. What parameter should they
use?
A.-l
B.-L
C.-e
D.-u.
Answer: D.-u
The -u parameter starts Netcat in UDP mode. The default is to use
TCP. Netcat is a command-line utility used to read from or write to a
TCP or UDP network connection.
The -l parameter starts Netcat in listen mode. The default mode is to
act as a client.
The -L parameter starts Netcat in the Windows-only "listen harder"
mode. This mode creates a persistent listener that starts listening
again when the client disconnects.
The -e parameter specifies the program to execute when a
connection is made.
,◉ A military unit has adopted sending communications hidden in
the white space of text files as a standard operating procedure.
Which of the following tools uses white space to conceal data
payloads?
A.Snow
B.Steghide
C.OpenStego
D.Yersinia.
Answer: A.Snow
Snow is a CLI steganography tool that conceals a data payload within
the whitespace of a text file that uses the ASCII format.
◉ A security penetration tester wants to try exfiltrating data by
synthesizing images into .wav files. Which tool should they use to do
this?
A.OpenStego
B.Snow
C.Coagula
D.Ostinato.
Answer: C.Coagula
,Coagula is a tool used to synthesize an image into a .wav file. To
achieve this, you'll need to download Coagula and Audacity, which
are both free programs.
◉ A penetration tester wants to test exfiltrating data via encrypted
mechanisms. What could they use to accomplish this?
A.Netcat
B.Ncat
C.Coagula
D.Yersinia.
Answer: B.Ncat
Ncat is an Interactive CLI tool written for the Nmap Project. Ncat is
used to read and write raw data over a network and includes
support for proxy connections along with IPv6 and SSL
communications.
◉ A penetration tester has established a foothold inside a network
and wants to conduct reconnaissance inside while remaining
anonymous. What could they use to best accomplish this?
A.SOCKS
B.masscan
C.Ostinato
D.Snow.
, Answer: A.SOCKS
Proxy servers are used on a network to mediate the communications
between a client and another server. One method is to use Socket
Secure (SOCKS).
◉ A security consultant is in the reconnaissance phase of a
penetration test and believes there might be a non-stateful firewall
blocking the scan. What Nmap parameter would be the best option
to try to bypass the non-stateful firewall without being detected?
A.-sS
B.-oX
C.-sF
D.-sX.
Answer: C.-sF
The -sF option sends a TCP FIN to bypass a non-stateful firewall.
◉ A software engineer conducts a ping sweep to identify hosts in a
Windows environment and plans on next enumerating the hosts on
the network. What tool uses cmdlets and can enumerate information
such as the OS version, shares, files, services, and registry keys?
A.Nmap
B.PowerShell
STUDY GUIDE WITH SOLVED QUESTIONS
◉ A security professional is setting up a netcat listener but they
want to start up in UDP instead of TCP. What parameter should they
use?
A.-l
B.-L
C.-e
D.-u.
Answer: D.-u
The -u parameter starts Netcat in UDP mode. The default is to use
TCP. Netcat is a command-line utility used to read from or write to a
TCP or UDP network connection.
The -l parameter starts Netcat in listen mode. The default mode is to
act as a client.
The -L parameter starts Netcat in the Windows-only "listen harder"
mode. This mode creates a persistent listener that starts listening
again when the client disconnects.
The -e parameter specifies the program to execute when a
connection is made.
,◉ A military unit has adopted sending communications hidden in
the white space of text files as a standard operating procedure.
Which of the following tools uses white space to conceal data
payloads?
A.Snow
B.Steghide
C.OpenStego
D.Yersinia.
Answer: A.Snow
Snow is a CLI steganography tool that conceals a data payload within
the whitespace of a text file that uses the ASCII format.
◉ A security penetration tester wants to try exfiltrating data by
synthesizing images into .wav files. Which tool should they use to do
this?
A.OpenStego
B.Snow
C.Coagula
D.Ostinato.
Answer: C.Coagula
,Coagula is a tool used to synthesize an image into a .wav file. To
achieve this, you'll need to download Coagula and Audacity, which
are both free programs.
◉ A penetration tester wants to test exfiltrating data via encrypted
mechanisms. What could they use to accomplish this?
A.Netcat
B.Ncat
C.Coagula
D.Yersinia.
Answer: B.Ncat
Ncat is an Interactive CLI tool written for the Nmap Project. Ncat is
used to read and write raw data over a network and includes
support for proxy connections along with IPv6 and SSL
communications.
◉ A penetration tester has established a foothold inside a network
and wants to conduct reconnaissance inside while remaining
anonymous. What could they use to best accomplish this?
A.SOCKS
B.masscan
C.Ostinato
D.Snow.
, Answer: A.SOCKS
Proxy servers are used on a network to mediate the communications
between a client and another server. One method is to use Socket
Secure (SOCKS).
◉ A security consultant is in the reconnaissance phase of a
penetration test and believes there might be a non-stateful firewall
blocking the scan. What Nmap parameter would be the best option
to try to bypass the non-stateful firewall without being detected?
A.-sS
B.-oX
C.-sF
D.-sX.
Answer: C.-sF
The -sF option sends a TCP FIN to bypass a non-stateful firewall.
◉ A software engineer conducts a ping sweep to identify hosts in a
Windows environment and plans on next enumerating the hosts on
the network. What tool uses cmdlets and can enumerate information
such as the OS version, shares, files, services, and registry keys?
A.Nmap
B.PowerShell
