CCT CCT Ethical Hacking & Penetration Testing 2

Question 1

What is the goal of the 'post-exploitation' phase in a penetration test?

Accepted Answer

Maintaining access, pivoting, and demonstrating the impact of a compromise

Answer

Post-exploitation demonstrates the real-world impact of a compromise by pivoting to other systems, escalating privileges, and exfiltrating data to show what an attacker could achieve.

Question 2

Which tool is commonly used for password cracking by performing dictionary and brute-force attacks against password hashes?

Accepted Answer

John the Ripper

Answer

John the Ripper is a popular open-source password security auditing tool that can crack password hashes using dictionary attacks, brute-force attacks, and rule-based attacks.

Question 3

What is a 'pivot' in penetration testing?

Accepted Answer

Using a compromised system as a relay to attack other internal systems not directly accessible

Answer

Pivoting uses a compromised host as a jump point to reach and attack other network segments or systems that are not directly reachable from the attacker's machine.

Question 4

What is the OWASP Testing Guide primarily used for?

Accepted Answer

Providing a comprehensive methodology for web application security testing

Answer

The OWASP Testing Guide provides a structured framework with test cases for identifying security vulnerabilities in web applications, covering authentication, authorization, input validation, and more.

Question 5

Which type of social engineering attack involves creating a fabricated scenario to manipulate a target into divulging information?

Accepted Answer

Pretexting

Answer

Pretexting involves constructing a fabricated scenario (a pretext) to extract information or gain trust from a target, such as impersonating IT support to get a user's password.

CCT - Certified Cybersecurity Technician Practice Test

CCT - Certified Cybersecurity Technician Practice Test

CCT CCT Ethical Hacking & Penetration Testing 2