GPEN Post Exploitation Techniques Quiz

1. What does LSASS dumping accomplish on Windows systems?

Captures user credentials and hashes

Clears event viewer logs

Disables Windows Defender

Creates scheduled tasks

2. Which post-exploitation activity focuses on gathering sensitive information from compromised systems?

Privilege escalation

Data harvesting and exfiltration

Network scanning

Vulnerability assessment

3. What is the primary advantage of using WMI for post-exploitation on Windows?

It is difficult to detect and leaves minimal logs

It provides network connectivity

It bypasses all firewalls

It automatically patches vulnerabilities

4. Which post-exploitation technique involves creating hidden user accounts for future access?

Account enumeration

Backdoor account creation

Credential dumping

Token impersonation

5. What does 'covering tracks' involve in post-exploitation?

Installing more malware

Removing evidence of intrusion and attacker activities

Escalating privileges further

Scanning for additional vulnerabilities

6. Which technique allows an attacker to execute commands with higher privileges than the current user?

Horizontal privilege escalation

Vertical privilege escalation

Lateral movement

Data exfiltration

7. What is the purpose of using a reverse shell in post-exploitation?

To establish interactive command control from the attacker

To encrypt network traffic

To identify network topology

To patch system vulnerabilities

8. Which Windows Registry hive stores user credentials and password hashes?

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE\SAM

HKEY_CLASSES_ROOT

HKEY_CURRENT_CONFIG

9. What is a 'living off the land' binary (LOLBin)?

A custom malware executable

Legitimate system tool misused for malicious purposes

A rootkit file

A network sniffing tool

10. Which technique involves extracting data from a compromised system without raising alarms?

Covert exfiltration

Privilege escalation

Account enumeration

Vulnerability scanning

11. What is the primary goal of post-exploitation in a penetration test?

Gain initial access to the target system

Maintain access and extract sensitive data

Identify network vulnerabilities

Perform denial-of-service attacks

12. Which post-exploitation activity involves moving through a network to compromise additional systems?

Exfiltration

Lateral movement

Privilege escalation

Log tampering

13. What is 'living off the land' in post-exploitation context?

Using legitimate system tools to avoid detection

Disconnecting from the network

Installing custom backdoors

Performing data encryption

14. Which technique allows an attacker to assume the identity of a trusted user after gaining access?

Credential dumping

Lateral movement

Token impersonation

Network sniffing

15. What is the purpose of clearing or modifying system logs during post-exploitation?

Improve system performance

Hide evidence of intrusion and attacker activity

Prevent future vulnerabilities

Backup critical system data

16. In Linux systems, which file modification is commonly used to maintain persistence?

/etc/passwd entries

Cron jobs and .bashrc files

/etc/hosts configuration

Kernel module parameters

17. What is a rootkit primarily designed to do?

Scan for open ports

Hide malicious activity and maintain root-level access

Encrypt sensitive files

Generate network traffic logs

18. Which Windows mechanism can be exploited to create a backdoor account?

Group Policy Objects

Scheduled Tasks with SYSTEM privileges

Windows Firewall rules

Event Viewer logs

19. What does the term 'persistence' mean in post-exploitation?

Maintaining unauthorized access over time

Deleting logs to avoid detection

Escalating privileges immediately

Exfiltrating all available data

20. Which privilege escalation technique exploits a flaw in a service running with elevated permissions?

Kernel exploit

DLL injection

Sudo misconfiguration

Registry modification

GPEN Post Exploitation Techniques Quiz

1. What does LSASS dumping accomplish on Windows systems?

2.

What first name or nickname would you like us to use?

2. Which post-exploitation activity focuses on gathering sensitive information from compromised systems?

3. What is the primary advantage of using WMI for post-exploitation on Windows?

4. Which post-exploitation technique involves creating hidden user accounts for future access?

5. What does 'covering tracks' involve in post-exploitation?

6. Which technique allows an attacker to execute commands with higher privileges than the current user?

7. What is the purpose of using a reverse shell in post-exploitation?

8. Which Windows Registry hive stores user credentials and password hashes?

9. What is a 'living off the land' binary (LOLBin)?

10. Which technique involves extracting data from a compromised system without raising alarms?

11. What is the primary goal of post-exploitation in a penetration test?

12. Which post-exploitation activity involves moving through a network to compromise additional systems?

13. What is 'living off the land' in post-exploitation context?

14. Which technique allows an attacker to assume the identity of a trusted user after gaining access?

15. What is the purpose of clearing or modifying system logs during post-exploitation?

16. In Linux systems, which file modification is commonly used to maintain persistence?

17. What is a rootkit primarily designed to do?

18. Which Windows mechanism can be exploited to create a backdoor account?

19. What does the term 'persistence' mean in post-exploitation?

20. Which privilege escalation technique exploits a flaw in a service running with elevated permissions?