A penetration tester runs the following from a compromised box 'python -c -import pty;Pty.sPawn("/bin/bash").'
Which of the following actions is the tester taking?

A company decides to remediate issues identified from a third-party penetration test done to its infrastructure.
Management should instruct the IT team to:

A penetration tester was able to retrieve the initial VPN user domain credentials by phishing a member of the IT department. Afterward, the penetration tester obtained hashes over the VPN and easily cracked them using a dictionary attack. Which of the following remediation steps should be recommended? (Select THREE).

An SMB server was discovered on the network, and the penetration tester wants to see if the server it vulnerable. Which of the following is a relevant approach to test this?

Which of the following would be BEST for performing passive reconnaissance on a target's external domain?