Question 1

You’re red teaming and impersonate a helpdesk rep to reset a C-level user’s password. You succeed.

What do you document in the report?

Options :

A : Only the password reset

B : Include the impersonation steps, script, and responses

C : Just the outcome

D : Exclude it because it’s too sensitive

Answer: B

Question 2

You find that your compromised user has GenericWrite over another domain user object. What privilege escalation path does this open?

Options :

A : Modify user’s password directly

B : Create a new user and add to Domain Admins

C : Add a malicious SPN to perform Kerberoasting

D : Modify user object to enable delegation

Answer: C

Question 3

Which of the following best explains why impact ratings are used in a penetration test report?

Options :

A : To show the CVSS base score

B : To prioritize remediation based on business risk

C : To explain the value of automation

D : To justify tool selection

Answer: B

Question 4

You’ve dumped SAM and SYSTEM hives on a Windows host. What can you extract? (Select all that apply)

Options :

A : NTLM password hashes

B : User login timestamps

C : SID of local accounts

D : Kerberos tickets

Answer: A,B,C

Question 5

Your report is being reviewed by a CISO who is not technical. What reporting approach should you use to effectively communicate the findings?

Options :

A : Include all terminal output and Metasploit commands

B : Use business-impact language and prioritized summaries

C : Use business-impact language and prioritized summaries

D : Write the report in passive voice for professionalism

Answer: B

Free OSCP Mock Exam – Practice Online Confidently