A penetration tester is tasked with gaining access to a local machine by cracking a user’s password. Before password cracking can begin, they need to enumerate usernames within the organization. The organization uses a domain-based email format (firstname.lastname@organization.com). After conducting OSINT and obtaining potential email addresses, the tester needs to identify valid usernames. Which of the following is the MOST effective method to proceed with user enumeration in a Windows-based domain?

What state are they in now?

A PenTest exercise has concluded. The PenTest team now addresses which area?

As a penetration tester, you are tasked with simulating a watering hole attack to demonstrate the potential risks to an organization’s network. Which of the following steps should you take to effectively carry out this attack?

How many villages is Jojo in line to be chief of?

During a penetration test, you discover that an organization’s web application is vulnerable to SQL injection attacks. Which of the following technical control factors would be the MOST effective in mitigating this vulnerability and securing the application?

During a penetration test, you are required to identify active hosts on a connected /24 ethernet local access network without performing a full port scan. You need to quickly identify live hosts on the network and check for any potential firewall rules blocking your discovery. Which of the following Nmap scan options should you use?

As a penetration tester, you are tasked with assessing the security of an AI system used by an organization for customer support. You need to explain potential vulnerabilities and attacks that could be exploited. Which of the following BEST describes a prompt injection attack on an AI system?

A penetration tester is conducting an assessment of cloud workloads and identifies a vulnerable API that could potentially be exploited during the workload runtime. Which of the following actions would BEST help the tester leverage this vulnerability?

During a security assessment, a pentester discovers that a web application allows users to access other users’ data by changing the user ID parameter in the URL. What should the pentester recommend as the first step to mitigate this vulnerability?