During a penetration test, the Rules of Engagement (RoE) are established to define the guidelines and boundaries within which the test should be conducted. Which of the following is NOT typically covered by the RoE?

Which attack is a DoS method specifically used to target wireless communication protocols?

During a web application penetration test, you are tasked with identifying vulnerabilities in the organization’s web server. You decide to use a proxy tool to intercept and analyze the traffic between the client and the server. Which of the following options will provide the BEST insights into potential vulnerabilities during a web transaction?

A penetration tester is tasked with assessing a wireless access point (WAP) in a coffee shop offering free Wi-Fi. The tester discovers that the connection is not encrypted, and decides to intercept the 4-way handshake to attempt a brute-force attack on the pre- shared key. Which of the following is the most appropriate first step the penetration tester should take in this scenario?

A penetration tester is conducting a social engineering test to assess an organization’s vulnerability to phishing attacks. The tester decides to use the Social Engineering Toolkit (SET) to craft a phishing email campaign aimed at harvesting credentials. What is the first step the tester should take before launching the phishing campaign?

Which of the following statements BEST describes the primary purpose of Breach and Attack Simulation (BAS) platforms?

Which of the following BEST explains why Python is widely used in penetration testing and security tools development?

Why is ongoing documentation, including the use of screenshots, considered a critical practice during a penetration testing engagement?

During a penetration test, a pentester successfully gains access to an employee’s workstation with limited privileges. Which of the following techniques should the pentester prioritize to effectively move laterally through the network and escalate privileges?

Which of the following BEST evaluates the effectiveness of using scripts to validate scan results during a penetration test?