PenTest+ Persistence and Lateral Movement Quiz

1. Kerberoasting targets which authentication protocol?

NTLM

Kerberos

OAUTH2

SAML

2. True or False: Lateral movement always requires escalating to administrative privileges.

True

False

3. Which of the following is a method of maintaining persistence via web applications?

Installing a webshell in the web root

Modifying DNS records

Changing router firmware

Installing kernel modules

Submit

5. What is the purpose of a dead drop in persistence?

Storing data or credentials for later retrieval

Immediately exfiltrating stolen data

Encrypting network traffic

Blocking firewall rules

6. Which technique establishes persistence by modifying startup files on Linux?

.bashrc or .bash_profile modification

Windows Registry editing

Task Scheduler configuration

Browser extension installation

Submit

8. What does a golden ticket in Kerberos provide?

Unlimited access to domain resources

Temporary network connectivity

Encryption key negotiation

DNS resolution privileges

9. Which lateral movement technique exploits trust relationships between systems?

Golden ticket attacks

Cross-trust forest attacks

Credential stuffing

Brute force attacks

Submit

11. What is the primary goal of post-exploitation persistence?

Maintain unauthorized access after initial compromise

Scan for open ports

Identify network topology

Patch system vulnerabilities

12. What is pass-the-hash in lateral movement?

Using captured password hashes to authenticate without cracking them

Modifying hash values in transit

Stealing hash-based encryption keys

Cracking hashes to obtain plaintext passwords

13. Which persistence technique uses the Windows Registry Run key?

Scheduled task execution

Autorun registry modification

Cron job installation

SSH authorized keys injection

Submit

15. Which tool is commonly used for creating reverse shells?

Nessus

Netcat

Wireshark

Burp Suite

16. What is privilege escalation?

Gaining higher-level permissions on a compromised system

Moving between network segments

Encrypting data in transit

Updating firewall rules

17. Which of the following is a common persistence mechanism on Windows systems?

Scheduled tasks with malicious payload

BIOS updates

DNS records

SSL certificates

Submit

19. What does a webshell provide to an attacker?

Remote command execution through a web interface

Direct database access

Network packet capture

Wireless network credentials

20. Which technique creates a hidden user account for future access?

Port forwarding

Backdoor account creation

SSH key injection

ARP spoofing

PenTest+ Persistence and Maintaining Access Methods Quiz

1. Kerberoasting targets which authentication protocol?

2.

What first name or nickname would you like us to use?

2. True or False: Lateral movement always requires escalating to administrative privileges.

3. Which of the following is a method of maintaining persistence via web applications?

4. Mimikatz is primarily used for extracting ____ from compromised Windows systems.

5. What is the purpose of a dead drop in persistence?

6. Which technique establishes persistence by modifying startup files on Linux?

7. Living off the land refers to using ____ tools already present on a system.

8. What does a golden ticket in Kerberos provide?

9. Which lateral movement technique exploits trust relationships between systems?

10. DLL injection allows attackers to execute code in the context of a ____ process.

11. What is the primary goal of post-exploitation persistence?

12. What is pass-the-hash in lateral movement?

13. Which persistence technique uses the Windows Registry Run key?

14. A rootkit provides attackers with ____ access to a compromised system.

15. Which tool is commonly used for creating reverse shells?

16. What is privilege escalation?

17. Which of the following is a common persistence mechanism on Windows systems?

18. Lateral movement refers to moving from one ____ to another within a network.

19. What does a webshell provide to an attacker?

20. Which technique creates a hidden user account for future access?