1 of 15
Question 1 of 10 · Engagement Management
What is a reason to pause an engagement immediately?
An outage or critical incident warrants pausing and notifying the client.
Question 2 of 10 · Reconnaissance and Enumeration
Which tool is commonly used for network mapping and scanning?
Nmap maps hosts, ports and services.
Question 3 of 10 · Vulnerability Discovery and Analysis
What does exploitability tell a tester about a vulnerability?
Available exploits and low complexity increase exploitability.
Question 4 of 10 · Attacks and Exploits
Which attack manipulates a user into revealing credentials on a fake page?
Fake login pages capture credentials the user enters.
Question 5 of 10 · Post-exploitation and Lateral Movement
Which is an example of staging before exfiltration?
Staging gathers and prepares data before exfiltration.
Question 6 of 10 · Engagement Management
What is a get-out-of-jail-free letter in a penetration test?
It authorizes testing so activities are not treated as crimes.
Question 7 of 10 · Reconnaissance and Enumeration
What does banner grabbing reveal?
Banners often disclose software and versions, guiding vulnerability research.
Question 8 of 10 · Vulnerability Discovery and Analysis
Which CVSS metric captures whether an attack needs network access?
Attack vector records network, adjacent, local or physical access.
Question 9 of 10 · Attacks and Exploits
Which attack tries a few common passwords across many accounts?
Spraying avoids lockouts by trying few passwords across many users.
Question 10 of 10 · Post-exploitation and Lateral Movement
What does dumping the SAM database provide?
The SAM holds local hashes usable for cracking or pass-the-hash.
0 of 10
Engagement Management
Reconnaissance and Enumeration
Vulnerability Discovery and Analysis
Attacks and Exploits
Post-exploitation and Lateral Movement