1-

The function of the technical section of the report is:

To instruct IT personell on what to fix

To give step-by-step fixing instrutions for IT personnel

To set the scope of a test

To outline when the penetration tester should come back

2-

During exploitation, which of the following techniques could help the penetration tester get past defenses?

Group of answer choices

Blacklist bypassing

Disabling anti-malware software on the target host

Packing payloads with data compression

Disabling DEP and ASLR on the target host

3-

Level 2 Information gathering is best described as:

Group of answer choices

Information that can be gathered almost entirely with automated tools

Information that requires manual analysis

Information that requires cultivating persona relationships with employees

None of the above

4

After successful intrusion into a system, a penetration tester should:

Group of answer choices

Leave all hacking tools on the host as evidence that they were there

Use the compromised system to attack other firms

Download hacking tools from the target host

Exfiltrate data if allowed by the rules of engagement