Ethical Hacking Network Penetration Testing 2

Question 1

Which Metasploit command is used to search for available exploit modules?

Accepted Answer

search

Answer

The 'search' command in Metasploit queries its database of exploit modules, payloads, and auxiliary modules by keyword or CVE.

Question 2

What is 'pivoting' in the context of network penetration testing?

Accepted Answer

Using a compromised host to attack other internal systems

Answer

Pivoting uses a compromised machine as a relay point to reach and attack other systems in a network that are not directly accessible from the attacker's machine.

Question 3

Which protocol is exploited by the 'Pass the Hash' attack technique?

Accepted Answer

NTLM

Answer

Pass the Hash exploits NTLM authentication by using captured password hashes directly to authenticate without knowing the plaintext password.

Question 4

What does TTL (Time to Live) value in a ping response help a penetration tester determine?

Accepted Answer

Operating system type

Answer

Different operating systems use different default TTL values (e.g., Windows=128, Linux=64), allowing testers to fingerprint the OS from ping responses.

Question 5

Which technique involves sending malformed packets to crash or reveal information about a target system?

Accepted Answer

Fuzzing

Answer

Fuzzing sends unexpected, malformed, or random data to a system to discover vulnerabilities, crashes, or unexpected behaviors in software.

Ethical Hacking Practice Test

Ethical Hacking Practice Test

Ethical Hacking Network Penetration Testing 2