Ethical Hacking System Hacking 3

Question 1

What is the purpose of steganography when used as a technique in system hacking and data exfiltration?

Accepted Answer

Hiding malicious data or messages within innocent-looking carrier files such as images or audio

Answer

Steganography conceals data within ordinary files to hide the existence of communication or covertly exfiltrate stolen data without triggering DLP controls.

Question 2

Which Windows command is used to enumerate all scheduled tasks configured on a system, a common persistence mechanism abused by attackers?

Accepted Answer

schtasks /query /fo LIST

Answer

The schtasks /query command lists all scheduled tasks on the system, revealing any malicious tasks that attackers may have created to maintain persistence.

Question 3

What is process hollowing, and how does it differ from standard DLL injection?

Accepted Answer

Creating a legitimate process in a suspended state and replacing its entire memory image with malicious code

Answer

Process hollowing creates a legitimate process in suspended state, unmaps its code from memory, and injects malicious code that runs under the trusted process's identity to evade detection.

Question 4

What does an NTLM relay attack exploit to authenticate to target services without cracking the hash?

Accepted Answer

The ability to intercept and forward NTLM authentication challenges to another target service

Answer

NTLM relay attacks intercept authentication requests from a victim and relay them to a different target, authenticating as the victim without needing to crack the NTLM hash.

Question 5

Which commercial post-exploitation and adversary simulation platform, widely used by red teams and frequently associated with advanced threat actors, uses 'Beacon' as its primary payload?

Accepted Answer

Cobalt Strike

Answer

Cobalt Strike is a commercial adversary simulation platform with Beacon as its C2 payload, widely used for post-exploitation and commonly seen in APT campaigns.

Ethical Hacking Practice Test

Ethical Hacking Practice Test

Ethical Hacking System Hacking 3