Question 1

Which of the following is not typically associated with passive information gathering?

Options :

A : DNS zone transfer

B : WHOIS lookup

C : Google Dorking

D : LinkedIn OSINT

Answer: A

Question 2

Which LDAP attribute is typically used by attackers to identify accounts that never expire?

Options :

A : userAccountControl

B : msDS-AllowedToDelegateTo

C : servicePrincipalName

D : lastLogonTimestamp

Answer: A

Question 3

Which of the following best explains why impact ratings are used in a penetration test report?

Options :

A : To show the CVSS base score

B : To prioritize remediation based on business risk

C : To explain the value of automation

D : To justify tool selection

Answer: B

Question 4

What is the function of the command searchsploit vsftpd 2.3.4?

Options :

A : Launches a Metasploit exploit

B : Uploads an exploit to a target

C : Searches local Exploit-DB for relevant vulnerabilities

D : Runs a VSFTP vulnerability scanner

Answer: C

Question 5

You find that your compromised user has GenericWrite over another domain user object. What privilege escalation path does this open?

Options :

A : Modify user’s password directly

B : Create a new user and add to Domain Admins

C : Add a malicious SPN to perform Kerberoasting

D : Modify user object to enable delegation

Answer: C

Higher Test Marks with Free Online OSCP Exam Practice