Which of the following scenarios would MOST likely lead to an Arbitrary Code Execution (ACE) attack?

During a penetration test, the pentester identifies multiple pathways that an attacker could exploit to gain access to the internal network. The pentester decides to use a tool to help visualize these paths, making it easier to identify vulnerabilities and assess the attack surface. Which of the following tools would be the MOST appropriate for mapping out these potential attack paths?

What is the primary purpose of the Open Source Security Testing Methodology Manual (OSSTMM)?

A penetration tester is assessing an AWS web application hosted on a cloud platform and discovers that the application accepts user input to fetch the content of a URL. After reviewing the code, the tester finds that the input is not properly sanitized. The tester crafts a URL that targets the Instance Metadata Service (IMS) to obtain sensitive information. What is the next step the penetration tester should take after retrieving temporary credentials from the metadata service?

Which of the following actions poses a significant risk to the security of a mobile device by potentially allowing malicious applications to gain root access and execute unauthorized code?

You are tasked with clearing the event logs on a Windows server named Server02 as part of your penetration test to cover your tracks. You decide to use PowerShell to accomplish this. Which of the following PowerShell scripts would allow you to clear the Security and Application logs on the specified server and verify that the operation was successful?

A penetration tester is assessing a Windows system for potential service misconfigurations that could be exploited to gain unauthorized access or elevate privileges. After identifying the running services using Nmap, which of the following techniques should the tester apply to exploit a misconfigured service?

When conducting penetration testing on Information Technology (IT) systems compared to Operational Technology (OT) systems, which of the following considerations is the MOST critical for OT environments?

A penetration tester has been tasked with capturing network traffic to identify hosts, services, and sensitive data. The network uses switches, and the penetration tester wants to maximize their ability to capture traffic from multiple devices. Which of the following approaches is the MOST effective for achieving this goal?

An organization reviews a recommendations report after a successful PenTest exercise. The cost to mitigate the issue as outlined in the report will be costly. Which group is the report generated for?