A penetration tester needs to perform a vulnerability scan against a web server. Which of the following tools is the tester MOST likely to choose?

1. A. Nmap
2. B. Nikto
3. C. Cain and Abel
4. D. Ethercap

Correct Answer: B
https://hackertarget.com/nikto-website-scanner/

A company that developers embedded software for the automobile industry has hired a penetration-testing team to evaluate the security of its products prior to delivery. The penetration-testing team has stated its intent to subcontract to a reverse-engineering team capable of analyzing binaries to develop proof-of-concept exploits. The software company has requested additional background investigations on the reverse- engineering team prior to approval of the subcontract. Which of the following concerns would BEST support the software company’s request?

1. A. The reverse-engineering team may have a history of selling exploits to third parties.
2. B. The reverse-engineering team may use closed-source or other non-public information feeds for its analysis.
3. C. The reverse-engineering team may not instill safety protocols sufficient for the automobile industry.
4. D. The reverse-engineering team will be given access to source code for analysis.

Correct Answer: A

A penetration tester finds a PHP script used by a web application in an unprotected internal source code repository. After reviewing the code, the tester identifies the following:

Which of the following combinations of tools would the penetration tester use to exploit this script?

1. A. Hydra and crunch
2. B. Netcat and cURL
3. C. Burp Suite and DIRB
4. D. Nmap and OWASP ZAP

Correct Answer: B

A security firm is discussing the results of a penetration test with the client. Based on the findings, the client wants to focus the remaining time on a critical network segment. Which of the following BEST describes the action taking place?

1. A. Maximizing the likelihood of finding vulnerabilities
2. B. Reprioritizing the goals/objectives
3. C. Eliminating the potential for false positives
4. D. Reducing the risk to the client environment

Correct Answer: B
Goal Reprioritization Have the goals of the assessment changed? Has any new information been found that might affect the goal or desired end state? I would also agree with A, because by goal reprioritization you are more likely to find vulnerabilities in this specific segment of critical network, but it is a side effect of goal reprioritization.

Which of the following situations would MOST likely warrant revalidation of a previous security assessment?

1. A. After detection of a breach
2. B. After a merger or an acquisition
3. C. When an organization updates its network firewall configurations
4. D. When most of the vulnerabilities have been remediated

Correct Answer: D