OSEP Network Pivoting Techniques Quiz

1. True or False: A pivot host must have direct internet access.

True

False

2. In network pivoting, what does 'egress filtering' restrict?

Inbound traffic to the network

Outbound traffic from internal systems

Administrative access

DNS resolution

3. What is the primary advantage of using a meterpreter session for pivoting?

It encrypts all traffic automatically

It provides built-in routing and multi-stage exploitation capabilities

It bypasses all firewalls

It requires no system privileges

4. True or False: Network segmentation completely prevents pivoting.

True

False

Submit

6. What is the primary risk of using unencrypted tunnels during pivoting?

Reduced pivoting speed

Traffic interception and credential exposure

Increased CPU usage

Loss of administrative rights

7. How do you establish a reverse SOCKS proxy using SSH?

Ssh -R 1080:localhost:1080

Ssh -D 1080

Ssh -L 1080:target:22

Ssh -P 1080

Submit

9. In the context of OSEP, what does 'lateral movement' require?

Root or administrator privileges on the target

Valid credentials or exploitable vulnerabilities

Internet connectivity

Physical access to network equipment

10. Which Windows command creates local port forwarding rules?

Netsh int portproxy

Route add

Ipconfig /all

Netstat -an

11. What is the primary goal of network pivoting in penetration testing?

To gain initial access to a target system

To traverse from a compromised host to other internal network segments

To establish direct internet connectivity

To disable firewall rules

12. What is a 'dead drop' technique in network pivoting?

Leaving malware on a USB drive

Creating intermediate communication points for data exfiltration

Disabling network monitoring

Resetting router configurations

13. Which Metasploit module is used for establishing pivot routes?

Exploit/multi/handler

Post/windows/manage/portproxy

Auxiliary/scanner/http/dir_scanner

Payload/windows/meterpreter/reverse_tcp

14. How does port forwarding differ from dynamic port forwarding?

Port forwarding is faster

Port forwarding redirects specific ports; dynamic supports multiple protocols

Dynamic forwarding requires more bandwidth

No functional difference

15. What is a 'jump host' in network pivoting terminology?

A router that filters traffic

An intermediate compromised system used to access deeper network segments

A honeypot system

A backup server

16. Which protocol is typically used for creating encrypted tunnels between pivot points?

HTTP

SSH or TLS

FTP

ICMP

17. What is the purpose of using a proxy chain in offensive operations?

To increase internet speed

To obscure the attacker's origin and evade detection

To reduce latency

To compress network traffic

18. In Windows, which native tool can establish reverse shells for pivoting?

Powershell.exe

Cmd.exe

Netsh.exe

All of the above

19. What does a SOCKS proxy enable during network pivoting?

Direct system-to-system file transfer

Routing arbitrary traffic through a compromised host

Encryption of all network traffic

Bypass of antivirus software

20. Which tool is commonly used to create dynamic port forwarding tunnels in Linux?

Netstat

SSH with -D flag

Iptables

Tcpdump