Cyber Security Jobs Penetration Testing and Ethical Hacking 2

Question 1

What is SQL injection and how does a pentester test for it?

Accepted Answer

Inserting malicious SQL into input fields to manipulate a database; tested by submitting SQL characters like ' or 1=1--

Answer

SQL injection exploits unsanitized input fields to manipulate database queries; pentesters test by entering SQL metacharacters and observing error responses or data leakage.

Question 2

What is privilege escalation in a penetration test?

Accepted Answer

Gaining higher-level access (e.g., admin) from a lower-privilege account after initial access

Answer

Privilege escalation involves exploiting vulnerabilities or misconfigurations to gain higher-level permissions than initially obtained, such as moving from user to administrator.

Question 3

Which Kali Linux tool is used for password cracking using dictionary and brute-force attacks?

Accepted Answer

John the Ripper or Hashcat

Answer

John the Ripper and Hashcat are the leading password cracking tools on Kali Linux, supporting dictionary attacks, brute force, and rule-based attacks against password hashes.

Question 4

What is cross-site scripting (XSS) and why do pentesters look for it?

Accepted Answer

Injecting malicious scripts into web pages viewed by other users; exploitable for session hijacking

Answer

XSS allows attackers to inject client-side scripts into web pages, potentially stealing session cookies, redirecting users, or defacing sites, making it a critical web app finding.

Question 5

What is the purpose of a penetration test report?

Accepted Answer

Document findings, severity ratings, evidence, and remediation recommendations for the client

Answer

A pentest report communicates discovered vulnerabilities with evidence, CVSS severity scores, and actionable remediation steps to help the client fix identified weaknesses.

Cyber Security Jobs Practice Test

Cyber Security Jobs Practice Test

Cyber Security Jobs Penetration Testing and Ethical Hacking 2