Chapter 2 Opsec Final Exam Study Guide 2024.

Chapter 2 Opsec Final Exam Study Guide 2024. Robert is a black box penetration tester who conducted pen testing attacks on all of the network's application servers. He was able to exploit a vulnerability and gain access to the system using a mimikatz tool. Which of the following activities did he perform using mimikatz, and which task should he perform next? - CORRECT ANSWER Robert used mimikatz for credential harvesting, and should perform privilege escalation using a high-privileged account next. A vulnerability assessment engineer performed vulnerability scanning on active directory servers and discovered that the active directory server is using a lower version of Kerberos. To alert management to the risk behind using a lower version of Kerberos, he needs to explain what an attacker can do to leverage the vulnerabilities in it. Which of the following actions can the attacker perform after exploiting vulnerabilities in Kerberos? - CORRECT ANSWER Use privilege escalation What are the primary features of a security information event management (SIEM) tool? - CORRECT ANSWER Aggregation, correlation, event deduplication, time synchronization, and alerting Dillip is assigned the role of a SOC developer who must build different teams under the SOC. He must build a new team that will put security defenses in place to prevent another team from penetrating the network. Which team should he build to monitor the other team's attacks and shore up security defenses as necessary? - CORRECT ANSWER Blue team Which of the following tools can be used to scan 16 IP addresses for vulnerabilities? - CORRECT ANSWER Nessus Essentials What is the primary goal of penetration testing? - CORRECT ANSWER Attempt to uncover deep vulnerabilities and then manually exploit them