PenTest+ Information Gathering & Vulnerability Identification 3

Question 1

A penetration tester uses Recon-ng to automate OSINT collection. Which of the following best describes Recon-ng's primary function?

Accepted Answer

A modular web reconnaissance framework for gathering open-source intelligence

Answer

Recon-ng is a full-featured web reconnaissance framework with a modular design for automating OSINT gathering from multiple sources.

Question 2

During a pentest, a tester discovers a web server running an outdated version of Apache with a known CVE. What CVSS metric primarily describes whether the vulnerability can be exploited over the network without physical access?

Accepted Answer

Attack Vector

Answer

The Attack Vector metric in CVSS describes the context in which exploitation is possible, including Network, Adjacent, Local, and Physical.

Question 3

Which tool is MOST commonly used to perform zone transfer attempts against a DNS server?

Accepted Answer

dig

Answer

The `dig` command with the AXFR query type (e.g., `dig axfr @nameserver domain`) is the standard tool for attempting DNS zone transfers.

Question 4

A tester finds a web application that accepts user input in a URL parameter and reflects it back in the response. What vulnerability should be investigated FIRST?

Accepted Answer

Cross-site scripting (XSS)

Answer

When user input is reflected in the browser response without sanitization, cross-site scripting (XSS) is the primary vulnerability to investigate.

Question 5

When scoping a penetration test, which document formally defines the boundaries of testing and provides legal authorization?

Accepted Answer

Rules of engagement (ROE)

Answer

The Rules of Engagement (ROE) document formally defines what systems can be tested, testing timeframes, and authorized techniques, providing the legal authorization for the pentest.

(PenTest+) CompTIA PenTest+ Certification Practice Test

(PenTest+) CompTIA PenTest+ Certification Practice Test

PenTest+ Information Gathering & Vulnerability Identification 3