Content Preview

PRACTICE EXAM 1 – CASP 2025 QUESTIONS AND ANSWERS While conducting a penetration test of a web application, you enter the following URL, http://test.diontraining.com/../../../../etc/shadow. What type of exploit are you attempting? - ....ANSWER ...-Directory traversal You are working as part of a penetration testing team during an engagement. A coworker just entered "New-Service -Name "DionTrainingApp" -BinaryPathName C:\Windows\temp\WindowsTools.exe" in PowerShell on the Windows server the team exploited. What action is your coworker performing with this command? ....ANSWER ...-To enable persistence on the server You are planning an engagement with a new client. The client wants your penetration testers to target their web and email servers that are hosted in a screened subnet and are accessible to visitors over the Internet. Which target type best describes these targets? ....ANSWER ...-External You have been asked to help design a new architecture for Dion Training's website. The current architecture involves a single server that hosts the website in its entirety. The company's newest course has been creating a lot of interest on social media. The CIO is concerned that the single server will not be able to handle the increased demand that could result from this increased publicity. What technology should you implement in the ...©️ 2025, ALL RIGHTS RESERVED 1