A penetration tester observes that the content security policy header is missing during a web application penetration test.
Which of the following techniques would the penetration tester MOST likely perform?

Which of the following properties of the penetration testing engagement agreement will have the largest impact on observing and testing production systems at their highest loads?

A penetration tester is performing initial intelligence gathering on some remote hosts prior to conducting a vulnerability scan.
The tester runs the following command:
nmap -D 192.168.1.1, 192.168.1.2, 192.168.1.3 -sV -o --max-rate 2 192.168.1.130 Which of the following BEST describes why multiple IP addresses are specified?

During a web application assessment, a penetration tester discovers that arbitrary commands can be executed on the server. Wanting to take this attack one step further, the penetration tester begins to explore ways to gain a reverse shell back to the attacking machine at 192.168.1.5. Which of the following are possible ways to do so? (Select TWO).

In which of the following components is an exploited vulnerability MOST likely to affect multiple running application containers at once?