Question 1

In a scenario where you suspect that an API's session tokens are not properly validated, which technique would you use to test the effectiveness of the API's session management?

Options :

A : Modify the API key in the header to see if the response changes

B : force session expiration by sending requests at rapid intervals

C : attempt session replay by reusing a captured valid session token to perform unauthorized actions

D : Use an invalidated token to access the API and monitor for unauthorized data retrieval

Answer: C

Question 2

Which command in Hydra would you use to perform a brute force attack on an FTP server?

Options :

A : hydra ftp 192.168.0.1 -V -f -l admin -p /wordlist.txt

B : hydra -l user -P /path/to/wordlist.txt ftp://192.168.0.1

C : nmap --script ftp-brute --script-args userdb=users.txt,passdb=pass.txt 192.168.0.1

D : brutus -u ftp://192.168.0.1 -U userlist.txt -P passlist.txt

Answer: B

Question 3

How can one use Kismet to identify weak encryption methods being used in nearby wireless networks?

Options :

A : Use the Kismet spectrum analysis tool to visually identify networks using outdated encryption standards.

B : Set Kismet to alert mode and manually inspect each network for the use of WEP or WPA encryption.

C : enable logging in Kismet and perform a manual analysis of packet captures to identify encryption protocols.

D : configure Kismet to log all detected networks and review the security settings of each for weak encryption.

Answer: D

Question 4

During a penetration test, a payload needs to be developed to maintain persistence on the target system after reboot. Which technique can be embedded in the payload for this purpose?

Options :

A : Registry key modification for startup execution

B : Scheduled task creation for session renewal

C : dding the payload to the authorized_keys file

D : mbedding the payload in a cron job

Answer: A

Question 5

How would you write a Python script to capture and analyze network packets to detect potential vulnerabilities?

Options :

A : import pcap

B : import scapy.all as scapy

C : import netifaces

D : import socket

Answer: B