Data Exfiltration & Impact Demonstration Quiz

1. Which of the following is a common persistence mechanism on Windows systems?

Registry Run keys and scheduled tasks

BIOS firmware updates

Physical hardware modifications

Printer driver installations

2. What is the primary risk of using default or weak credentials during lateral movement attempts?

High likelihood of detection due to failed authentication attempts and security alerts

Loss of all network connectivity

Immediate system shutdown

Permanent data corruption

3. Which Active Directory enumeration tool is commonly used to map network structure for lateral movement?

BloodHound

Nmap

Shodan

Censys

4. What is the function of a C2 (Command and Control) server in post-exploitation?

To send commands to compromised systems and receive data exfiltrated from targets

To block unauthorized network connections

To monitor legitimate user activity

To patch vulnerabilities automatically

5. Which protocol or service is often targeted for lateral movement in cloud environments?

SSRF (Server-Side Request Forgery) and IAM role assumption

SMTP relay abuse

Telnet connections

HTTP Basic authentication

6. What is the primary challenge in exfiltrating data while avoiding detection?

Balancing data transfer speed with avoiding network anomalies and DLP triggers

Ensuring the data is corrupted during transfer

Preventing the user from accessing their own files

Encrypting data multiple times sequentially

7. Which command-line tool is commonly used to enumerate shares and permissions for lateral movement?

Net use and dir commands

Ipconfig and ping

Tasklist and wmic

Systeminfo and whoami

8. What is Kerberoasting and how does it aid lateral movement?

Extracting service account password hashes from Kerberos tickets for offline cracking

Blocking all Kerberos authentication requests

Creating new Kerberos service accounts

Monitoring Kerberos traffic for anomalies

9. Which attack technique uses legitimate credentials to move through a network?

Credential-based lateral movement

Buffer overflow exploitation

Zero-day vulnerability chaining

Physical port scanning

10. What is the primary advantage of using DNS tunneling for data exfiltration?

DNS traffic is often allowed through firewalls and rarely monitored

DNS provides encryption by default

DNS is faster than HTTP for data transfer

DNS prevents detection by antivirus software

11. Which of the following is the primary goal of data exfiltration in a penetration test?

To demonstrate the impact and business risk of a compromise

To permanently delete sensitive files from the target

To install ransomware on all systems

To prevent legitimate users from accessing data

12. What is the purpose of establishing persistence during post-exploitation?

To maintain access to the target system even after initial compromise is discovered

To immediately encrypt all files on the system

To alert the system administrator of the breach

To delete all user accounts from the system

13. Which exfiltration method is most effective for large volumes of data over untrusted networks?

Encrypted tunnels over DNS or HTTPS

Unencrypted FTP transfers

Printing sensitive documents

Email attachments without encryption

14. What is a Golden Ticket in Active Directory attacks?

A forged Kerberos ticket granting administrative access across the domain

A legitimate ticket issued by the domain controller

A temporary access token for VPN authentication

A certificate for encrypted email communication

15. Which Windows utility can be abused to execute remote commands for lateral movement?

PowerShell Remoting (WinRM)

Windows Defender

Task Scheduler

Event Viewer

16. What does the term 'living off the land' refer to in post-exploitation?

Using legitimate system tools and utilities already present to avoid detection

Physically stealing equipment from the target site

Disconnecting from the network to hide activity

Using only open-source exploitation frameworks

17. Which tool is frequently used to dump credentials from memory for lateral movement?

Mimikatz

Wireshark

Nessus

Burp Suite

18. What is pass-the-hash (PtH) used for in lateral movement?

Authenticating to systems using stolen NTLM hashes without cracking passwords

Creating new user accounts on remote systems

Encrypting data during transit

Monitoring network traffic for intrusions

19. Which protocol is commonly abused for lateral movement due to its prevalence in Windows environments?

SNMP

LDAP

SMB

DNS

20. What is lateral movement in the context of post-exploitation?

Moving data horizontally across network segments to reach higher-value targets

Physically relocating servers to different locations

Changing the direction of network traffic

Rotating user credentials periodically

PenTest+ Data Exfiltration for Impact Demonstration Quiz