Question 1

You are performing a Post-Exploitation task on a compromised Linux server. Which of the following would help you maintain access on the system? (Select all that apply)

Options :

A : Add a cron job to re-establish reverse shell every 5 minutes

B : Modify /etc/sudoers to allow user root privileges

C : Use chattr to lock the reverse shell file

D : Add your public SSH key to ~/.ssh/authorized_keys

Answer: A,C,D

Question 2

What types of information can be gathered using Amass? (Select all that apply)

Options :

A : ASN (Autonomous System Numbers)

B : Subdomains

C : IP addresses

D : Passwords

Answer: A,B,C

Question 3

Which LDAP attribute is typically used by attackers to identify accounts that never expire?

Options :

A : userAccountControl

B : msDS-AllowedToDelegateTo

C : servicePrincipalName

D : lastLogonTimestamp

Answer: A

Question 4

Which of the following is not typically associated with passive information gathering?

Options :

A : DNS zone transfer

B : WHOIS lookup

C : Google Dorking

D : LinkedIn OSINT

Answer: A

Question 5

Which of the following best explains why impact ratings are used in a penetration test report?

Options :

A : To show the CVSS base score

B : To prioritize remediation based on business risk

C : To explain the value of automation

D : To justify tool selection

Answer: B