A penetration tester needs to gather information about remote systems without using an interactive shell. Which of the following methods would allow the tester to query system information on a Windows machine?

During scoping and target prioritization, how should a penetration tester MOST appropriately treat an in-scope server that is confirmed to be an EOL operating system still in active use on the production network?

During a penetration test, a pentester has identified several potential vulnerabilities in the target system. To proceed, the pentester needs to select the appropriate exploit from Metasploit. Which of the following considerations is the MOST important when choosing an exploit?

Which of the following techniques is the simplest method a pentester can use to discover secrets during the enumeration phase?

The person expressed relief when their former company went out of business.

As a penetration tester, you are tasked with evaluating the susceptibility of an organization to social engineering attacks. You decide to use pretexting as part of your assessment. Which of the following actions BEST exemplifies the use of pretexting in this context?

Which of these two signs best matches the word ‘break’ (as in taking a lunch break)?

During the creation of a penetration test report, several key sections must be addressed to ensure the report is comprehensive and adheres to industry standards. One of these sections focuses on legal considerations. Which of the following elements should be included in the legal considerations section of a penetration test report to ensure that all actions taken were within legal boundaries?

A penetration tester is assessing a company’s SAML-based single sign-on (SSO) implementation. During testing, they observe that intercepted SAML assertions can be replayed without any additional verification. Which action should the penetration tester recommend to mitigate this vulnerability?

Which of the following statements BEST describes the concept of directory traversal in web applications?