eJPT Exploitation with Metasploit 2

Question 1

Which Metasploit command searches for modules by CVE number or keyword?

Accepted Answer

search

Answer

The 'search' command in msfconsole lets you find modules by CVE, name, platform, or type.

Question 2

What does the 'check' command do in Metasploit before running an exploit?

Accepted Answer

Verifies the target is vulnerable without exploiting it

Answer

The 'check' command tests whether the target is vulnerable without actually launching the exploit.

Question 3

Which payload type in Metasploit establishes a persistent TCP connection from target back to attacker?

Accepted Answer

reverse/tcp

Answer

A reverse_tcp payload causes the target machine to connect back to the attacker's listener.

Question 4

In Metasploit, what is the purpose of the LHOST option?

Accepted Answer

The local attacker machine IP that receives the reverse connection

Answer

LHOST specifies the attacker's IP address where reverse payloads will connect back to.

Question 5

What Metasploit command shows all currently configured options for the selected module?

Accepted Answer

show options

Answer

'show options' displays all required and optional parameters for the active module along with their current values.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test