Which password-cracking method requires extensive storage capacity, sometimes more than 300 GB in total?

Which of the following is an identifier provided for CWE entries?

Which of the following are items typically addressed in a master service agreement (MSA)? (Choose two.)

Which penetration testing methodology may require valid authentication credentials or other information granting intimate knowledge of an environment or network?

During the engagement, the clients blue team (the defenders) identifies your scans and sets a firewall rule to block all traffic to their environment from your IP address. Of the following options, which would be the most appropriate course of action to continue the penetration test?

What is the effect of the -PS flag in nmap?

Which of the following data sources is not a valid option in theharvester?

If travel to remote field offices or data centers is required as part of a penetration test, in what contractual document would this usually be found?

Refer to the following scenario for the next five questions: You have been contracted for a penetration test by a local hospital. The client has requested a third-party security assessment to provide confirmation that they are adhering to HIPAA guidelines. In addition, the client requests that you perform a detailed penetration test of a proprietary web application that they use to manage their inventories. To further assist this effort, they have provided a detailed map of their network architecture in addition to authorized administrative credentials, source code, and related materials for the web application. Your master service agreement with the client indicates that your written authorization is to be a separately delivered document, and that it should be digitally delivered one week before the scheduled start date of the engagement. It is currently three days before the start date agreed upon in preliminary meetings, and you do not yet have a signed authorization letter. What type of penetration test is most likely being requested by the client in this scenario?

Which method of collecting open-source intelligence consists of the collection of published documents, such as Microsoft Office or PDF files, and parsing the information hidden within to reveal usernames, e-mail addresses, or other sensitive data?