As a penetration tester, you are tasked with evaluating the susceptibility of an organization to social engineering attacks. You decide to use pretexting as part of your assessment. Which of the following actions BEST exemplifies the use of pretexting in this context?

Which of these two signs best matches the word ‘break’ (as in taking a lunch break)?

During the creation of a penetration test report, several key sections must be addressed to ensure the report is comprehensive and adheres to industry standards. One of these sections focuses on legal considerations. Which of the following elements should be included in the legal considerations section of a penetration test report to ensure that all actions taken were within legal boundaries?

A penetration tester is assessing a company’s SAML-based single sign-on (SSO) implementation. During testing, they observe that intercepted SAML assertions can be replayed without any additional verification. Which action should the penetration tester recommend to mitigate this vulnerability?

Which of the following statements BEST describes the concept of directory traversal in web applications?

Which DNS record type is used to map a domain name to its corresponding IPv4 address during DNS enumeration?

During a penetration test, the pentester decides to use a password spraying attack against an organization’s user accounts. Which approach would be the most effective way to carry out this attack while minimizing the risk of detection?

The person was promoted several times before the business began to slow down.

How many cats does Jojo have?

During a penetration test, you are tasked with identifying devices on the network that are running with default configurations. Which of the following default configurations would pose the highest security risk and should be addressed immediately?