Question 1

Fill in the blank: When performing fuzz testing on software, a common fuzzing framework is ___ which supports generation and mutation based techniques.

Options :

A : Peach

B : FL (American Fuzzy Lop)

C : oofuzz

D : LibFuzzer

Answer: A

Question 2

Fill in the blank: In patch reversal techniques, the attacker typically analyzes __________ to identify how the patch modifies the system behavior.

Options :

A : the user feedback

B : the security advisories

C : the patch binary

D : the system logs

Answer: C

Question 3

Which command would initiate a YARA rule scan to detect malware signatures and unauthorized access tools on a network file system?

Options :

A : clamscan --database=/path/to/rules --recursive /network/shared/drives/

B : grep -ri 'malware' /network/shared/drives/

C : nmap --script yara.rules -p445 /network/shared/drives/

D : yara -r -p 20 /path/to/rules /network/shared/drives/

Answer: D

Question 4

When implementing an egg hunting technique in a penetration test, what should be the initial step to ensure its effectiveness?

Options :

A : onduct a preliminary scan to identify potential buffer sizes and limits for the payload.

B : Perform a network scan to determine the most effective entry point for the egg hunter.

C : nalyze the target application for vulnerabilities that can be exploited with the egg hunter.

D : Review the target system-s security logs to adjust the egg hunter-s parameters.

Answer: A

Question 5

You discover an unpatched vulnerability in a proprietary software during a pentest. How would you proceed to develop an exploit for this zero-day finding?

Options :

A : Reverse engineer the software to understand the vulnerable code path and craft a custom exploit.

B : Search public exploit databases to find if a pre-existing exploit is already available.

C : ontact the software vendor to disclose the vulnerability and wait for a patch.

D : ollaborate with other security researchers to gather more data about potential exploits.

Answer: A

Higher Test Marks with Free Online CPENT Exam Practice

Buying Options: