Ethical Hacking Network Penetration Testing 3

Question 1

Which scan technique sets the FIN, PSH, and URG flags simultaneously to probe for open ports?

Accepted Answer

XMAS scan

Answer

NULL scan

Answer

SYN scan

Answer

ACK scan

Question 2

What is 'lateral movement' in a network penetration test?

Accepted Answer

Moving between hosts within a network after initial compromise

Answer

Escalating privileges on a single machine

Answer

Establishing persistence through a backdoor

Answer

Exfiltrating data to an external server

Question 3

Which Nmap option is used to detect the operating system of a target host?

Accepted Answer

-O

Answer

-sV

Answer

-A

Answer

-Pn

Question 4

What is a 'golden ticket' attack in Active Directory penetration testing?

Accepted Answer

Exploiting Kerberos by forging TGTs using the KRBTGT hash

Answer

Brute forcing domain admin credentials

Answer

Creating a rogue domain controller

Answer

Injecting malicious Group Policy Objects

Question 5

During a penetration test, what does 'enumeration' primarily involve?

Accepted Answer

Gathering detailed information about network resources, users, and services

Answer

Cracking passwords offline

Answer

Exploiting a known vulnerability

Answer

Covering tracks after access

Question 6

Which tool is widely used to perform ARP spoofing attacks during a penetration test?

Accepted Answer

Arpspoof

Answer

Nmap

Answer

Wireshark

Answer

Hydra