Where is Wepro Technology located?

Wepro Technology is based in Darwin, NT, Australia. We offer in-person instructor-led IT certification courses with flexible weekend and evening schedules.

What IT certification courses do you offer in Darwin?

We offer CCNA, CEH (Certified Ethical Hacker), CompTIA Security+, Network+, A+, Microsoft Azure AZ-900, Linux LPIC-1, Fortinet NSE4, MikroTik MTCNA, CHFI, and PenTest+ — all instructor-led in Darwin, NT.

Are there weekend IT courses available in Darwin?

Yes. Wepro Technology offers flexible weekend and evening batches specifically designed for working professionals in Darwin and the Northern Territory.

Do you provide CCNA training in Darwin?

Yes. Our CCNA course is one of our most popular programs, delivered in Darwin with hands-on labs covering routing, switching, and Cisco networking fundamentals.

Is cybersecurity certification training available in Darwin?

Yes. Wepro Technology offers CEH, CHFI, Security+, PenTest+, and other cybersecurity certification courses in Darwin, NT, Australia.

Free PenTest+ Practice

Free CompTIA PenTest+ Quiz

Test your CompTIA PenTest+ (PT0-002) knowledge with this free practice quiz. Questions cover planning and scoping, information gathering, attacks and exploits (network, web app, wireless, social engineering), reporting, and pentest tooling.

Ideal for Australian IT security professionals pursuing vendor-neutral penetration testing certification.

Explore IT Courses

PenTest+ Ready? Start the Free Quiz

Answer the multiple-choice questions below and submit to see how many you got right. A new randomised set is drawn from the question bank each session.

Select an answer to start0%

01Which document formally authorizes a penetration tester to conduct security testing against a specific target?

Non-Disclosure Agreement (NDA)

Rules of Engagement (ROE)

Statement of Work (SOW)

Letter of Authorization (LOA)

02What is the primary purpose of defining the scope during penetration test planning?

To determine the hourly billing rate for the engagement

To establish which systems, networks, and methods are in or out of bounds for testing

To select which exploitation frameworks the tester will use

To schedule the vulnerability scanning windows

03A client asks for a penetration test where the testers are given full knowledge of the internal network architecture, credentials, and source code. What type of test is this?

Black-box test

Gray-box test

White-box test

Blind test

04Which concept describes the legal agreement between a penetration tester and client that prevents disclosure of confidential information obtained during an engagement?

Master Service Agreement (MSA)

Non-Disclosure Agreement (NDA)

Service Level Agreement (SLA)

End-User License Agreement (EULA)

05During a penetration test kickoff meeting, the client specifies that production databases must not be tested during business hours. This restriction is documented in which artifact?

Penetration Test Report

Rules of Engagement (ROE)

Vulnerability Disclosure Policy

Risk Assessment Report

06A penetration tester accidentally discovers evidence of an active data breach by a third party while performing a contracted test. What is the most appropriate immediate action?

Continue the test and document the finding in the final report

Immediately exploit the breach to gather additional evidence

Stop testing and notify the client according to the incident reporting procedures in the contract

Anonymously report the breach to law enforcement

07What does the term 'threat modeling' involve in the context of penetration test planning?

Building 3D simulations of network topology

Identifying potential attackers, their motivations, and likely attack vectors against the target

Generating automated threat signatures for IDS systems

Calculating the financial cost of a potential breach

08Which penetration testing methodology is developed and maintained by PTES (Penetration Testing Execution Standard)?

OWASP Testing Guide

PTES Technical Guidelines

NIST SP 800-115

ISSAF

09Which Nmap scan type sends TCP SYN packets and does not complete the three-way handshake, making it less likely to be logged by the target?

TCP Connect scan (-sT)

TCP SYN scan (-sS)

UDP scan (-sU)

ACK scan (-sA)

10A penetration tester uses the command 'whois example.com'. What type of reconnaissance is this?

Active reconnaissance

Passive reconnaissance

Internal reconnaissance

Physical reconnaissance

11Which tool is primarily used for Open Source Intelligence (OSINT) gathering and can automate the collection of emails, subdomains, hosts, and employee names?

Metasploit

theHarvester

Burp Suite

Wireshark

12What does the Nmap output 'filtered' indicate for a scanned port?

The port is open and accepting connections

The port is closed and actively refusing connections

A firewall or packet filter is blocking probes to the port

The port state cannot be determined due to network errors

13During DNS enumeration, which record type would a penetration tester query to discover all mail servers for a domain?

A record

CNAME record

MX record

PTR record

14A tester uses Shodan to identify internet-facing devices belonging to a client. Which category of reconnaissance does this represent?

Active internal reconnaissance

Passive external reconnaissance

Active external reconnaissance

Physical reconnaissance

15Which vulnerability scanning tool is widely used in enterprise environments and produces detailed reports that categorize vulnerabilities by severity using the CVSS scoring system?

Aircrack-ng

Nessus

Hydra

Maltego

16What is the purpose of a banner grab during information gathering?

To capture network traffic for offline analysis

To retrieve service version information from open ports

To enumerate user accounts on a target system

To identify wireless access points in range

17Which Nmap script category is used specifically to enumerate vulnerabilities on discovered services?

nmap --script=discovery

nmap --script=vuln

nmap --script=exploit

nmap --script=brute

18Which attack involves sending a large volume of TCP SYN packets to a target without completing the three-way handshake, exhausting server resources?

Smurf attack

SYN flood attack

Ping of Death

Teardrop attack

19A penetration tester uses Responder to capture NTLMv2 hashes on a Windows network. What vulnerability is being exploited?

LLMNR/NBT-NS poisoning

Kerberoasting

Pass-the-hash

Golden ticket attack

20Which technique involves an attacker inserting themselves between two communicating parties to intercept and potentially alter communications?

SQL injection

Man-in-the-Middle (MitM) attack

Buffer overflow

Cross-site scripting

21A tester runs 'arpspoof -i eth0 -t 192.168.1.10 192.168.1.1'. What is the purpose of this command?

Scanning the target for open ports

Poisoning the ARP cache of 192.168.1.10 to redirect its traffic through the attacker

Performing a DNS hijacking attack against the gateway

Flooding the network with ARP requests to cause a DoS

22Which Metasploit module type is used to maintain access on a compromised system after initial exploitation?

Auxiliary module

Exploit module

Payload module

Post module

23What is a 'pivot' in the context of penetration testing?

Changing the attack vector from network to physical

Using a compromised system as a relay to attack other systems on an otherwise inaccessible network segment

Rotating encryption keys during a VPN attack

Switching from passive to active reconnaissance

24Which tool is commonly used to perform password spraying attacks against Active Directory environments?

Mimikatz

BloodHound

Kerbrute

Impacket

25What does the term 'Pass-the-Hash' (PtH) describe in a Windows environment?

Cracking NTLM hashes offline using rainbow tables

Authenticating to a service using a captured NTLM hash without knowing the plaintext password

Injecting malicious code into the Windows LSASS process

Forwarding Kerberos tickets to impersonate another user