PenTest+ Network Attack Techniques Quiz

1. What is the purpose of a vulnerability scan in penetration testing?

Identify potential weaknesses in systems

Encrypt all network traffic

Monitor employee activity

Remove malware from systems

2. Which technique involves redirecting network traffic to an attacker's system?

DNS hijacking

IP spoofing

Packet sniffing

Session hijacking

3. What does CVSS stand for in vulnerability assessment?

Common Vulnerability Severity System

Comprehensive Vulnerability Scanning Suite

Common Vulnerability Scoring System

Cyber Vulnerability Security Standard

4. In a pass-the-hash attack, what credential is captured and reused?

Plaintext password

Password hash

Encryption key

Session token

5. Which attack exploits trust relationships between systems on a network?

Phishing attack

Lateral movement

Watering hole attack

Pivot attack

6. What is the primary function of a rootkit in an attack?

Scan for open ports

Maintain hidden administrator access

Encrypt user files

Monitor network traffic

7. Which network protocol is vulnerable to ARP spoofing attacks?

TCP

UDP

ARP

HTTPS

8. In password cracking, what technique tries every possible password combination?

Dictionary attack

Rainbow table

Brute force attack

Credential stuffing

9. What is a zero-day exploit?

Attack on the first day of deployment

Exploit for a previously unknown vulnerability

Attack that fails immediately

Exploit requiring zero network access

10. Which attack technique involves injecting malicious scripts into a web page viewed by victims?

SQL injection

Cross-site scripting (XSS)

LDAP injection

Command injection

11. Which attack involves sending specially crafted packets to a target system to identify open ports and services?

Port scanning

Man-in-the-middle attack

SQL injection

Privilege escalation

12. Which vulnerability allows an attacker to execute arbitrary code by overwriting memory buffers?

SQL injection

Buffer overflow

Path traversal

Insecure deserialization

13. In a replay attack, what is the attacker's primary objective?

Modify network packets in transit

Reuse captured authentication credentials

Crash the target server

Steal encryption algorithms

14. Which attack uses crafted credentials to gain unauthorized access to a system?

Brute force attack

Replay attack

Buffer overflow

Zero-day exploit

15. What is privilege escalation in the context of penetration testing?

Increasing network bandwidth

Gaining higher-level access than initially obtained

Installing antivirus software

Patching system vulnerabilities

16. Which protocol is commonly exploited in DNS amplification attacks?

TCP

UDP

ICMP

HTTP

17. What does a distributed denial-of-service (DDoS) attack use to overwhelm target systems?

Single attacker machine

Multiple compromised systems

Encryption keys

Social engineering tactics

18. Which type of attack exploits improper input validation to execute arbitrary code in a web application?

Cross-site scripting (XSS)

SQL injection

CSRF attack

Brute force attack

19. In a man-in-the-middle (MITM) attack, the attacker typically positions themselves between which two parties?

Two firewalls

Client and server

Two routers

DNS server and cache

20. What is the primary goal of a denial-of-service (DoS) attack?

Steal sensitive data

Disrupt service availability

Escalate user privileges

Modify system files

PenTest+ Network Based Attack Techniques Overview Quiz

1. What is the purpose of a vulnerability scan in penetration testing?

2.

What first name or nickname would you like us to use?

2. Which technique involves redirecting network traffic to an attacker's system?

3. What does CVSS stand for in vulnerability assessment?

4. In a pass-the-hash attack, what credential is captured and reused?

5. Which attack exploits trust relationships between systems on a network?

6. What is the primary function of a rootkit in an attack?

7. Which network protocol is vulnerable to ARP spoofing attacks?

8. In password cracking, what technique tries every possible password combination?

9. What is a zero-day exploit?

10. Which attack technique involves injecting malicious scripts into a web page viewed by victims?

11. Which attack involves sending specially crafted packets to a target system to identify open ports and services?

12. Which vulnerability allows an attacker to execute arbitrary code by overwriting memory buffers?

13. In a replay attack, what is the attacker's primary objective?

14. Which attack uses crafted credentials to gain unauthorized access to a system?

15. What is privilege escalation in the context of penetration testing?

16. Which protocol is commonly exploited in DNS amplification attacks?

17. What does a distributed denial-of-service (DDoS) attack use to overwhelm target systems?

18. Which type of attack exploits improper input validation to execute arbitrary code in a web application?

19. In a man-in-the-middle (MITM) attack, the attacker typically positions themselves between which two parties?

20. What is the primary goal of a denial-of-service (DoS) attack?