Which of the following best describes the main purpose of a web application vulnerability scanner like Nikto?

• To encrypt web traffic between a client and a server

• To identify known security issues and misconfigurations in web servers and applications

• To create backup copies of web applications

• To monitor website uptime and performance

What is the primary function of the tool 'dirb' in penetration testing?

• To scan for open ports on a server

• To brute-force directories and files on a web server

• To analyse network traffic for malicious activity

• To generate SSL certificates

Which of the following is considered a common web application vulnerability?

• SQL Injection

• Buffer Overflow in desktop applications

• Bluetooth sniffing

• ARP Spoofing

During a penetration test, which phase involves gathering as much information as possible about the target system?

• Reporting

• Exploitation

• Reconnaissance

• Remediation

Which HTTP response code indicates that a directory or file was found during a directory brute-force scan?

• 404 Not Found

• 200 OK

• 301 Moved Permanently

• 500 Internal Server Error

What is the main risk of leaving default files and directories accessible on a web server?

• Increased server speed

• Exposure of sensitive information or vulnerabilities

• Improved search engine ranking

• Reduced storage usage

Which of the following is NOT a feature of Nikto?

• Scanning for outdated server software

• Brute-forcing login credentials

• Checking for dangerous files and scripts

• Identifying default files and directories

Why is it important to use a comprehensive wordlist when performing directory brute-forcing with tools like dirb?

• To reduce the scan time

• To increase the likelihood of discovering hidden directories and files

• To avoid detection by firewalls

• To encrypt the scan results

Which of the following best describes Cross-Site Scripting (XSS)?

• Injecting malicious SQL queries into a database

• Executing malicious scripts in a user's browser via a vulnerable web application

• Intercepting network traffic between two parties

• Gaining unauthorised access to a server's file system

In the context of penetration testing, what does the term 'scope' refer to?

• The tools used during the test

• The time allocated for the test

• The systems, applications, and networks that are authorised to be tested

• The vulnerabilities discovered