TCM SECURITY PNPT
PRACTICE TEST 100
QUESTIONS
Question 1: During a penetration-test kicko�, which document most directly de�nes what systems may be tested and which actions are prohibited?
Choices:
1) Executive summary 2) Rules of Engagement 3) Non-Disclosure Agreement 4) Retest letter
Correct Answer: Rules of Engagement
Explanation: The Rules of Engagement de�nes the authorized scope, permitted techniques, timing, communications, and restrictions for the assessment. An NDA protects con�dential information but does not normally de�ne testing boundaries.Page 1
Question 2: A tester is given 10.20.30. as an in-scope subnet. How many usable
IPv4 host addresses are available?
Choices:
1) 62 2) 32 3) 30 4) 14
Correct Answer: 30
Explanation: A /27 leaves 5 host bits, giving 2^5 = 32 total addresses. Subtract the network and broadcast addresses to obtain 30 usable host addresses.Question 3: Which TCP behavior con�rms that a port is open during a standard SYN- based connection attempt?
Choices:
1) The target returns ARP who-has 2) The target returns RST 3) The target returns SYN-ACK 4) The target returns ICMP echo reply
Correct Answer: The target returns SYN-ACK
Explanation: In a normal TCP three-way handshake, an open listening port responds to a SYN with SYN-ACK. A reset commonly indicates a closed port.Page 2
Question 4: A tester needs to identify the software and version listening on
discovered network services. Which activity is most appropriate?
Choices:
1) Data ex�ltration 2) Password spraying 3) Privilege escalation 4) Service/version enumeration
Correct Answer: Service/version enumeration
Explanation: Service/version enumeration gathers banners and protocol details so the tester can understand what software is exposed and research relevant weaknesses.
Question 5: Which port is most commonly associated with SMB over TCP on modern
Windows networks?
Choices:
1) 53
2) 3389
3) 22
4) 445
Correct Answer: 445
Explanation: TCP 445 is the standard port for direct-hosted SMB. Port 22 is commonly SSH, 53 is DNS, and 3389 is RDP.Page 3