Ethical Hacking Network Penetration Testing 3

Question 1

Which scan technique sets the FIN, PSH, and URG flags simultaneously to probe for open ports?

Accepted Answer

XMAS scan

Answer

An XMAS scan lights up packets with FIN, PSH, and URG flags like a Christmas tree and can bypass some firewalls, though it doesn't work reliably on Windows systems.

Question 2

What is 'lateral movement' in a network penetration test?

Accepted Answer

Moving between hosts within a network after initial compromise

Answer

Lateral movement refers to techniques used by attackers to progressively move through a network after initial access to reach high-value targets.

Question 3

Which Nmap option is used to detect the operating system of a target host?

Accepted Answer

-O

Answer

The -O flag in Nmap enables OS detection by analyzing TCP/IP stack behavior and comparing it against a fingerprint database.

Question 4

What is a 'golden ticket' attack in Active Directory penetration testing?

Accepted Answer

Exploiting Kerberos by forging TGTs using the KRBTGT hash

Answer

A golden ticket attack forges Kerberos Ticket Granting Tickets (TGTs) by using the KRBTGT account hash, granting persistent, nearly unlimited domain access.

Question 5

During a penetration test, what does 'enumeration' primarily involve?

Accepted Answer

Gathering detailed information about network resources, users, and services

Answer

Enumeration involves actively querying target systems to extract detailed information such as usernames, shares, services, and configuration details.

Ethical Hacking Practice Test

Ethical Hacking Practice Test

Ethical Hacking Network Penetration Testing 3