Ethical Hacking System Hacking

Question 1

What is the primary goal of privilege escalation in system hacking?

Accepted Answer

Gaining higher-level access rights than initially obtained

Answer

Stealing user credentials from the target system

Answer

Installing malware on the target system

Answer

Scanning the network for open ports

Question 2

Which Windows database stores locally cached user account password hashes?

Accepted Answer

SAM (Security Account Manager)

Answer

NTFS (New Technology File System)

Answer

LSA (Local Security Authority)

Answer

HKLM (HKEY Local Machine)

Question 3

What type of malware is specifically designed to hide its presence and maintain persistent privileged access on a compromised system?

Accepted Answer

Rootkit

Answer

Adware

Answer

Ransomware

Answer

Worm

Question 4

Which Metasploit post-exploitation module is commonly used to extract NTLM password hashes from a compromised Windows system?

Accepted Answer

post/windows/gather/hashdump

Answer

post/windows/gather/credentials/credential_collector

Answer

post/multi/recon/local_exploit_suggester

Answer

exploit/windows/smb/ms17_010_eternalblue

Question 5

What is a pass-the-hash (PtH) attack?

Accepted Answer

Using a captured NTLM hash to authenticate without knowing the actual password

Answer

Using a plaintext password to authenticate to a remote system

Answer

Cracking a password hash offline using a dictionary attack

Answer

Sending a hashed payload to exploit a buffer overflow vulnerability

Question 6

Which tool is widely used for password cracking through brute force, dictionary, and rainbow table attacks?

Accepted Answer

John the Ripper

Answer

Nmap

Answer

Wireshark

Answer

Burp Suite

Question 7

What does 'living off the land' (LotL) mean in the context of system hacking?

Accepted Answer

Using legitimate system tools already present on the target to carry out attacks and evade detection

Answer

Using zero-day exploits to bypass all security controls

Answer

Installing custom malware frameworks on a compromised system

Answer

Harvesting credentials stored in browser profiles and password managers