Which of the following scenarios would MOST likely lead to an Arbitrary Code Execution (ACE) attack?

During scoping and target prioritization, how should a penetration tester MOST appropriately treat an in-scope server that is confirmed to be an EOL operating system still in active use on the production network?

When selecting the right capabilities for a penetration test, which of the following steps is MOST essential to ensure that a pentester can effectively identify vulnerabilities and provide valuable insights for improving security?

Which of the following BEST describes how Shodan can assist a penetration tester during an assessment involving IoT devices?

You are conducting a penetration test for a financial institution and are in the process of documenting your findings. During the test, you successfully exploited a vulnerability that allowed you to access sensitive customer data. You need to document this finding in a way that will be credible and useful for the client, who must present the report to a regulatory body. Which of the following actions should you take to ensure your documentation is both credible and compliant with industry standards?

A pentester has gained initial access to a network and is planning their next steps to explore and exploit the network further. The tester needs to decide between lateral and horizontal movement techniques to achieve their objectives. Which of the following scenarios BEST illustrates the use of horizontal movement within the network?

During a penetration test, a pentester aims to perform a pass-the-ticket attack in an Active Directory environment. Which step should the pentester take to successfully execute this attack and gain lateral movement in the network?

A penetration tester is assessing a Windows environment and wants to utilize a tool that can exploit Kerberos authentication. Which tool should the tester choose for this purpose?

The person got laid off and then found another job immediately.

Which of the following statements BEST describes the primary purpose of Breach and Attack Simulation (BAS) platforms?