WGUl D484l Objectivel Assessmentl Guidel (Latestl 2025/l 2026l Update)l Penetrationl Testingl |l Questionsl &l Answers|l Gradel A|l 100%l Correctl (Verifiedl Solutions)
Q:l PTESl (Penetrationl Testingl Executionl Standard)
Answer:
Al standardl establishedl inl 2009l thatl coversl sevenl areasl ofl penetrationl testingl andl includesl anl accompanyingl technicall guide.l Al standardl wayl ofl presentingl findings
Q:l Dradisl Framework
Answer:
Al frameworkl forl sharingl findingsl onl al pentestl thatl helpsl tol greatlyl reducel repetitionl andl increasel consistency
Q:l Nessus
Answer:
Isl al vulnerabilityl scannerl withl al modulel dedicatedl tol reportingl sol itl canl helpl withl thel presentationl ofl findings.l Wasl originallyl Openl sourcel butl nowl underl al licensel byl Tenable.l
Q:l Thirdl Partyl Stakeholders
Answer:
Peoplel notl directlyl involvedl withl thel clientl butl mayl stilll bel involvedl inl al processl relatedl tol thel penetrationl testl report.l
Q:l technicall staff
Answer:
personnell thatl maintainl thel systemsl thatl werel testedl duringl thel pentest.l
- / 4
Q:l Developers
Answer:
Personnell responsiblel forl creatingl andl maintainingl al solution,l thel softwarel developmentl ofl thel application
Q:l Executivel Summary
Answer:
Al high-levell andl concisel overviewl ofl thel penetrationl test,l itsl findings,l andl theirl impact.l
Q:l methodology
Answer:
Highl levell descriptionl ofl thel standardsl orl frameworkl thatl werel followedl tol conductl thel penetrationl test.l
Q:l Authoritativel Transferl (AXFR)
Answer:
Sometimesl calledl al DNSl Zonel Transfer
Q:l onl pathl attack
Answer:
Attackl wherel thel threatl actorl makesl anl independentl connectionl betweenl twol victimsl andl isl ablel tol readl andl possiblyl modifyl traffic.l
Q:l lifecyclel ofl al vulnerability
Answer:
Al processl thatl movesl froml thel initiall discoveryl ofl al vulnerability,l throughl coordination,l mitigation,l management,l andl documentation.l
Q:l Bannerl Grabbing
Answer: 2 / 4
al techniquel usedl duringl reconnaissancel tol gatherl informationl aboutl networkl hostsl andl thel servicesl runningl onl openl ports.l Thel processl involvesl attemptingl tol openl al sessionl withl al servicel andl gettingl thel servicel tol identifyl itself.l
Q:l Mappingl thel Network
Answer:
Anl essentiall firstl stepl inl thel activel reconnaissancel phasel ofl thel PenTest.l
Q:l Scanningl Considerations
Answer:
Timel tol runl Scans Bandwidthl limitations Fragilel Systems Queryl throttling
Q:l webl applicationl firewalll (WAF)
Answer:
isl specificallyl designedl tol monitorl webl applicationsl andl guardl againstl commonl attacksl suchl asl cross-sitel scriptingl (XSS)l andl SQLl Injectionl (SQLi)l attacks.l
Q:l Firewalking
Answer:
al techniquel thatl usesl al combinationl ofl traceroutel andl portl scanningl tol discoverl thel detailsl ofl thel internall network.l
Q:l Packetl Craftingl Stages
Answer:
Assemble Edit Play Decode
- / 4
Q:l SQLmap
Answer:
anl open-sourcel databasel scannerl thatl searchesl forl andl exploitsl SQLl injectionl flaws.l
Q:l Nameserverl (NS)
Answer:
recordl listsl thel authoritativel DNSl serverl forl al particularl domain.l
Q:l Textl (TXT)
Answer:
recordl providesl informationl aboutl al resourcel suchl asl al serverl orl networkl inl humanl readablel form
Q:l Servicel (SRV)
Answer:
recordl providesl hostl andl portl informationl onl servicesl suchl asl voicel overl IPl VOIPl andl instantl messagingl IM
Q:l Nslookup
Answer:
Commandl linel tooll usedl inl Windowsl orl Linuxl OSl thatl canl bel usedl tol queryl al domainl andl specifyl variousl recordl types
Q:l Dig
Answer:
al utilityl widelyl usedl onl al Linuxl OSl thatl canl performl reversel lookupsl tol matchl anl IPl addressl tol al domainl name.l
Q:l Websitel Enumeration
Answer:
involvesl discoveringl resourcesl thatl arel inl usel asl welll asl thel underlyingl technologyl usedl tol hostl thel server.l
- / 4