PenTest+ Network Attack Techniques Quiz

1. What is the primary goal of a denial-of-service (DoS) attack?

Steal sensitive data

Disrupt service availability

Escalate user privileges

Modify system files

2. What does CVSS stand for in vulnerability assessment?

Common Vulnerability Severity System

Comprehensive Vulnerability Scanning Suite

Common Vulnerability Scoring System

Cyber Vulnerability Security Standard

3. In a pass-the-hash attack, what credential is captured and reused?

Plaintext password

Password hash

Encryption key

Session token

4. Which attack exploits trust relationships between systems on a network?

Phishing attack

Lateral movement

Watering hole attack

Pivot attack

5. What is the primary function of a rootkit in an attack?

Scan for open ports

Maintain hidden administrator access

Encrypt user files

Monitor network traffic

6. Which network protocol is vulnerable to ARP spoofing attacks?

TCP

UDP

ARP

HTTPS

7. In password cracking, what technique tries every possible password combination?

Dictionary attack

Rainbow table

Brute force attack

Credential stuffing

8. What is a zero-day exploit?

Attack on the first day of deployment

Exploit for a previously unknown vulnerability

Attack that fails immediately

Exploit requiring zero network access

9. Which attack technique involves injecting malicious scripts into a web page viewed by victims?

SQL injection

Cross-site scripting (XSS)

LDAP injection

Command injection

10. What is the purpose of a vulnerability scan in penetration testing?

Identify potential weaknesses in systems

Encrypt all network traffic

Monitor employee activity

Remove malware from systems

11. Which vulnerability allows an attacker to execute arbitrary code by overwriting memory buffers?

SQL injection

Buffer overflow

Path traversal

Insecure deserialization

12. In a replay attack, what is the attacker's primary objective?

Modify network packets in transit

Reuse captured authentication credentials

Crash the target server

Steal encryption algorithms

13. What is privilege escalation in the context of penetration testing?

Increasing network bandwidth

Gaining higher-level access than initially obtained

Installing antivirus software

Patching system vulnerabilities

14. What does a distributed denial-of-service (DDoS) attack use to overwhelm target systems?

Single attacker machine

Multiple compromised systems

Encryption keys

Social engineering tactics

15. Which type of attack exploits improper input validation to execute arbitrary code in a web application?

Cross-site scripting (XSS)

SQL injection

CSRF attack

Brute force attack

16. In a man-in-the-middle (MITM) attack, the attacker typically positions themselves between which two parties?

Two firewalls

Client and server

Two routers

DNS server and cache

17. Which attack involves sending specially crafted packets to a target system to identify open ports and services?

Port scanning

Man-in-the-middle attack

SQL injection

Privilege escalation

18. Which attack uses crafted credentials to gain unauthorized access to a system?

Brute force attack

Replay attack

Buffer overflow

Zero-day exploit

19. Which protocol is commonly exploited in DNS amplification attacks?

TCP

UDP

ICMP

HTTP

20. Which technique involves redirecting network traffic to an attacker's system?

DNS hijacking

IP spoofing

Packet sniffing

Session hijacking

PenTest+ Network Based Attack Techniques Overview Quiz

1. What is the primary goal of a denial-of-service (DoS) attack?

2.

What first name or nickname would you like us to use?

2. What does CVSS stand for in vulnerability assessment?

3. In a pass-the-hash attack, what credential is captured and reused?

4. Which attack exploits trust relationships between systems on a network?

5. What is the primary function of a rootkit in an attack?

6. Which network protocol is vulnerable to ARP spoofing attacks?

7. In password cracking, what technique tries every possible password combination?

8. What is a zero-day exploit?

9. Which attack technique involves injecting malicious scripts into a web page viewed by victims?

10. What is the purpose of a vulnerability scan in penetration testing?

11. Which vulnerability allows an attacker to execute arbitrary code by overwriting memory buffers?

12. In a replay attack, what is the attacker's primary objective?

13. What is privilege escalation in the context of penetration testing?

14. What does a distributed denial-of-service (DDoS) attack use to overwhelm target systems?

15. Which type of attack exploits improper input validation to execute arbitrary code in a web application?

16. In a man-in-the-middle (MITM) attack, the attacker typically positions themselves between which two parties?

17. Which attack involves sending specially crafted packets to a target system to identify open ports and services?

18. Which attack uses crafted credentials to gain unauthorized access to a system?

19. Which protocol is commonly exploited in DNS amplification attacks?

20. Which technique involves redirecting network traffic to an attacker's system?