Which of the following statements BEST describes the primary purpose of Breach and Attack Simulation (BAS) platforms?

During a penetration test, the importance of administrative control factors is highlighted to establish a security framework. One key factor is role-based access control (RBAC), which assigns permissions based on roles to ensure restricted access to resources. Which of the following BEST explains how RBAC helps strengthen security in an organization?

During a penetration test of a large industrial facility using SCADA systems, the pentester identifies that the ICS devices are not segmented from the main organizational network and are using outdated protocols. The pentester uses Shodan and Nmap to discover vulnerabilities in these systems. What is the MOST critical risk that the pentester should report to the organization, and why?

A penetration tester is tasked with conducting a security assessment on a network and needs to use a combination of tools to scan for vulnerabilities, exploit them, and analyze network traffic. Which of the following combinations of tools would best suit the tester’s needs for scanning, exploiting, and traffic analysis?

A penetration tester is tasked with evaluating the security of a company’s wireless network, including potential risks at remote contractor offices. The company suspects that an unsecured access point may be in use. Which approach would be the most effective first step for identifying potentially open access points at the remote location?

A penetration tester needs to gather information about remote systems without using an interactive shell. Which of the following methods would allow the tester to query system information on a Windows machine?

A penetration tester is conducting a social engineering test to assess an organization’s vulnerability to phishing attacks. The tester decides to use the Social Engineering Toolkit (SET) to craft a phishing email campaign aimed at harvesting credentials. What is the first step the tester should take before launching the phishing campaign?

During a penetration test, the pentester identifies multiple pathways that an attacker could exploit to gain access to the internal network. The pentester decides to use a tool to help visualize these paths, making it easier to identify vulnerabilities and assess the attack surface. Which of the following tools would be the MOST appropriate for mapping out these potential attack paths?

During a PenTest, the scope must be clearly defined due to time constraints. Which of the following strategies is the MOST effective approach to ensure that critical vulnerabilities are identified while aligning with the organization’s security objectives?

Which of the following statements BEST describes the concept of directory traversal in web applications?