CVA CVA Operating System & Host-Based Vulnerabilities 2

Question 1

What is a pass-the-hash (PtH) attack?

Accepted Answer

Using a captured NTLM password hash to authenticate without knowing the plaintext password

Answer

Cracking a hashed password offline using a rainbow table

Answer

Injecting a hash collision into a digital certificate

Answer

Replacing a legitimate file hash to bypass integrity checks

Question 2

Which tool is most commonly associated with extracting Windows credential hashes from memory during a penetration test?

Accepted Answer

Mimikatz

Answer

Nmap

Answer

Burp Suite

Answer

Wireshark

Question 3

What is the primary function of a Host-Based Intrusion Detection System (HIDS)?

Accepted Answer

Monitoring and analyzing activity on a single host for signs of compromise

Answer

Blocking inbound network traffic based on firewall rules

Answer

Performing automated vulnerability scans across the network

Answer

Encrypting data at rest on the host operating system

Question 4

What type of vulnerability occurs when a program writes more data to a buffer than it was allocated to hold?

Accepted Answer

Buffer overflow

Answer

SQL injection

Answer

Race condition

Answer

Null pointer dereference

Question 5

Which Linux file stores hashed user passwords and is typically readable only by root?

Accepted Answer

/etc/shadow

Answer

/etc/passwd

Answer

/etc/login.defs

Answer

/etc/pam.conf

Question 6

What is the Windows Security Accounts Manager (SAM) database used for?

Accepted Answer

Storing local user account credentials and password hashes

Answer

Storing Kerberos tickets for domain authentication

Answer

Managing Windows Defender virus definition updates

Answer

Tracking software license keys for installed applications

Question 7

What does kernel exploitation typically aim to achieve?

Accepted Answer

Obtaining ring-0 (kernel-level) privileges to fully control the operating system

Answer

Enumerating open network ports on a target system

Answer

Generating a denial-of-service condition on a web server

Answer

Bypassing application-layer firewalls using crafted HTTP headers