1. Which of the following post-report delivery activities focuses on executing any additional assessment work that may be desired by the client or is required based on terms defined in the engagement-s statement of work?

A) Post-engagement clean-up
B) Debriefing
C) Client acceptance
D) Follow-up actions/retesting



2. Why should a multifactor authentication be used and encouraged instead of single-factor methods? (Select all that applies)(Select 2answers)

A) Multifactor authentication increases user friction, increasing the likelihood of the use of weak passwords
B) Single-factor authentication allows remote users to easily perform their work
C) Single-factor authentication reduces the complexity of obtaining access to a target system
D) Multifactor authentication is often required by compliance guidelines



3. Which of the following agreements states that the testers successfully did the agreed-upon scope of work?

A) Communication Path
B) Communication Triggers
C) Client Acceptance
D) Goal Reprioritization



4. Which of the following is not a post-engagement clean-up activity?

A) Removing shells installed on systems
B) Removing all backdoors, services, daemons, rootkits, and tester-created accounts installed during the rest
C) Testing duration
D) Removing any tools installed during the penetration test



5. Select the class of vulnerability that is applied when parameterization of user input and queries is recommended for mitigation technique?

A) Unnecessary Open Services
B) SQL Injection
C) Shared Local Administrator Credentials
D) Weak Password Complexity