Ethical Hacking System Hacking

Question 1

What is the primary goal of privilege escalation in system hacking?

Accepted Answer

Gaining higher-level access rights than initially obtained

Answer

Privilege escalation aims to gain elevated permissions (e.g., admin or root) beyond what was initially compromised, allowing greater control over the target system.

Question 2

Which Windows database stores locally cached user account password hashes?

Accepted Answer

SAM (Security Account Manager)

Answer

The SAM database stores Windows user account passwords as hashes and is a primary target for credential dumping attacks.

Question 3

What type of malware is specifically designed to hide its presence and maintain persistent privileged access on a compromised system?

Accepted Answer

Rootkit

Answer

Rootkits are designed to conceal themselves and other malicious software while maintaining privileged access, often modifying OS components to avoid detection.

Question 4

Which Metasploit post-exploitation module is commonly used to extract NTLM password hashes from a compromised Windows system?

Accepted Answer

post/windows/gather/hashdump

Answer

The hashdump module in Metasploit extracts NTLM password hashes from the SAM database on compromised Windows systems for offline cracking.

Question 5

What is a pass-the-hash (PtH) attack?

Accepted Answer

Using a captured NTLM hash to authenticate without knowing the actual password

Answer

Pass-the-hash allows attackers to authenticate to Windows systems using the NTLM hash directly without needing to crack or know the plaintext password.

Ethical Hacking Practice Test

Ethical Hacking Practice Test

Ethical Hacking System Hacking