Question 1

In a scenario where you suspect that an API's session tokens are not properly validated, which technique would you use to test the effectiveness of the API's session management?

Options :

A : Modify the API key in the header to see if the response changes

B : force session expiration by sending requests at rapid intervals

C : attempt session replay by reusing a captured valid session token to perform unauthorized actions

D : Use an invalidated token to access the API and monitor for unauthorized data retrieval

Answer: C

Question 2

Which of the following JavaScript code snippets would be used to perform heap spraying in a browser exploit?

Options :

A : var spray = unescape("%u9090%u9090%u9090"); for (i=0; i<1000; i++) { memory[i] = spray; } allocates memory with NOP sleds for the heap spray.

B : var fill = "%u4141"; while (true) { fill = fill + fill; } infinitely allocates memory but does not perform a heap spray.

C : for (i=0; i<100000; i++) { document.write(spray); } incorrectly writes to the document instead of allocating memory on the heap.

D : var buffer = new Array(1000).join("A"); fills the buffer with data but is not performing a traditional heap spray.

Answer: A

Question 3

What is the most effective method to automate the gathering of system configurations and service information during a reconnaissance phase?

Options :

A : Use a custom Bash script to manually fetch system logs and configurations upon user request.

B : Manually connect to each system using SSH and document the configuration and services.

C : eploy agents on network hosts that periodically send system information to a central server.

D : Script a series of Nmap scans with customized scripts that automatically parse and log the output.

Answer: D

Question 4

Which command sequence is effective for escalating privileges using a known vulnerable service on Linux?

Options :

A : chmod +s /bin/bash; /bin/bash -p

B : touch /tmp/evil; echo 'cp /bin/sh /tmp/sh; chmod +s /tmp/sh' > /tmp/evil

C : ls /tmp -l; chmod 777 /tmp/exploit.sh; /tmp/exploit.sh

D : find / -perm -4000 -exec ls -ldb {} ;

Answer: D

Question 5

During a penetration test, a payload needs to be developed to maintain persistence on the target system after reboot. Which technique can be embedded in the payload for this purpose?

Options :

A : Registry key modification for startup execution

B : Scheduled task creation for session renewal

C : dding the payload to the authorized_keys file

D : mbedding the payload in a cron job

Answer: A

Free CPENT Mock Exam – Practice Online Confidently

Buying Options: