GIAC Certification GIAC Certified Penetration Tester 3

Question 1

Which framework provides a structured methodology for penetration testing including pre-engagement, intelligence gathering, and reporting phases?

Accepted Answer

PTES

Answer

OWASP

Answer

NIST SP 800-53

Answer

ISO 27001

Question 2

What Windows feature, when enabled, stores domain credentials in plaintext in LSASS memory?

Accepted Answer

WDigest Authentication

Answer

Credential Guard

Answer

NTLM Relay

Answer

Constrained Delegation

Question 3

During a penetration test, which Nmap script category checks for known vulnerabilities on discovered services?

Accepted Answer

vuln

Answer

auth

Answer

discovery

Answer

brute

Question 4

What type of penetration test provides the tester with no prior knowledge of the target environment?

Accepted Answer

Black box

Answer

White box

Answer

Gray box

Answer

Crystal box

Question 5

Which Active Directory attack forges Kerberos tickets using a compromised domain controller's KRBTGT account hash?

Accepted Answer

Golden Ticket

Answer

Silver Ticket

Answer

Diamond Ticket

Answer

Bronze Ticket

Question 6

What does the term 'living off the land' mean in penetration testing context?

Accepted Answer

Using built-in OS tools and features to avoid detection

Answer

Using only open-source tools

Answer

Testing only on production systems

Answer

Limiting testing to web applications