OSCP Practice Test

1. What is the primary goal of the reconnaissance phase in penetration testing?

Gather information about the target without direct interaction

Exploit known vulnerabilities immediately

Establish persistence on the target system

Document all findings in a formal report

2. Which tool is commonly used for active reconnaissance and network mapping?

Nmap

Wireshark

Metasploit

Burp Suite

3. In the context of exploitation, what does a 'shellcode' payload do?

Encrypts network traffic

Executes arbitrary code on the target system

Scans for open ports

Patches system vulnerabilities

4. What is privilege escalation in penetration testing?

The process of gaining higher-level access on a compromised system

Documenting all network traffic

Establishing initial connection to a target

Removing audit logs from a system

5. Which HTTP method is typically used in SQL injection attacks?

GET

POST

Both GET and POST

DELETE

6. What does 'pivoting' mean in the context of a multi-stage attack?

Using a compromised system to attack other systems on the network

Rotating encryption keys

Changing IP addresses during an attack

Documenting attack timelines

7. Nmap command 'nmap -sS' performs which type of scan?

UDP scan

TCP SYN stealth scan

Ping sweep

Full connection scan

8. What is the purpose of a 'reverse shell' in post-exploitation?

To provide interactive command-line access to a compromised system

To encrypt all outgoing traffic

To block incoming connections

To scan for vulnerabilities

9. Which type of vulnerability allows an attacker to execute arbitrary code through user input?

Buffer overflow

Cross-site scripting (XSS)

Both buffer overflow and XSS

Denial of service

10. What is the primary purpose of enumerating services during reconnaissance?

Identify running services and potential vulnerabilities

Establish persistence

Encrypt network traffic

Remove evidence of compromise

11. True or False: A penetration test should include attempts to maintain access after initial compromise.

True

False

12. True or False: Social engineering is not considered part of a comprehensive penetration test.