Question 1

You want to create stealthy persistence on a Domain Controller using minimal file operations. What is a suitable technique?

Options :

A : Install a backdoor service

B : Add a new user to administrators

C : Create a skeleton key via mimikatz

D : Create an AlwaysInstallElevated MSI payload

Answer: C

Question 2

Which of the following best represents a legal consideration for penetration testers in most jurisdictions?

Options :

A : The right to exploit any vulnerability found

B : Client data ownership post-engagement

C : Automatic immunity from legal prosecution

D : The requirement for written authorization

Answer: D

Question 3

What types of information can be gathered using Amass? (Select all that apply)

Options :

A : ASN (Autonomous System Numbers)

B : Subdomains

C : IP addresses

D : Passwords

Answer: A,B,C

Question 4

$file = $_GET['page'];

include($file);

?>

What vulnerability is present in this PHP snippet?

Options :

A : Command Injection

B : SQL Injection

C : Local File Inclusion

D : Cross-site scripting

Answer: C

Question 5

fetch('/api/users?id=1 OR 1=1')

.then(res => res.json())

.then(data => console.log(data));

What kind of attack is illustrated?

Options :

A : Command injection

B : Insecure deserialization

C : SQL Injection via JS

D : Cross-site request forgery

Answer: C

Free OSCP Mock Exam – Practice Online Confidently