What was the final transportation she used to reach her workplace?

During a penetration test, the pentester gains access to a Windows machine and wants to retrieve user credentials for further analysis. Which tool would be MOST appropriate for dumping credentials stored in locations such as the SAM database, LSASS, or Active Directory?

What is Ketsi’s current living arrangement?

A penetration tester is assessing a Windows Active Directory environment to identify vulnerabilities in the PKI. The tester discovers a misconfiguration in the certificate management process that allows low-privileged users to enroll for certificates without approval. Which of the following best describes the potential risk associated with this misconfiguration?

During a security audit, an IT professional discovers that an attacker has been using a method to repeatedly send authentication requests to a user’s device, causing the user to accidentally approve an access request. Which type of authentication attack does this scenario describe?

A penetration tester is preparing to conduct a security assessment on an organization’s network. During the preparation phase, the tester notices that the documented scope of the test includes IP addresses that belong to a third-party vendor. The tester realizes that testing these IP addresses could lead to unauthorized access to systems not owned by the organization. Which of the following actions should the tester take to address this issue, and which documentation needs to be reviewed and potentially updated to ensure compliance with ethical and legal standards?

A penetration tester is tasked with testing the effectiveness of a firewall. The pentester sends specially crafted packets to determine if they can bypass the firewall. After several tests, the tester discovers that some packets are allowed through the firewall. Which of the following is the MOST likely reason for this, and what should the pentester include in their report?

Which of the following tools is BEST suited for scanning a web server for outdated versions, vulnerable files, and programs, but may leave a large footprint in the server’s log files?

José (on the left) explained three things New York City has that San Antonio doesn’t. What was not mentioned?

Which of the following BEST explains the importance of organizing a penetration test report into different sections such as an Executive Summary and Detailed Findings?