PenTest Plus V3 Exploitation Techniques Quiz

1. What is the purpose of a staged payload in Metasploit?

To deliver a small initial payload that downloads the full payload in stages

To encrypt all communication between attacker and target

To prevent antivirus software from detecting any payloads

To verify the target system's operating system before exploitation

2. In exploitation frameworks like Metasploit, what is an encoder used for?

Obfuscating payloads to evade antivirus detection

Compressing payloads to reduce network bandwidth

Verifying payload integrity after transmission

Converting payloads between different processor architectures

3. Which post-exploitation activity involves collecting sensitive data from a compromised system?

Data exfiltration

Data normalization

Data validation

Data compression

4. What does a webshell provide to an attacker after compromising a web server?

Web-based remote command execution and file management capabilities

Direct access to the server's physical hardware

Automatic encryption of all web traffic

Protection against future vulnerability exploits

5. Which technique involves exploiting a service running with elevated privileges?

Privilege escalation via vulnerable service

Network segmentation bypass

Credential harvesting

Man-in-the-middle interception

6. In privilege escalation, what is a privilege boundary?

The separation between user-mode and kernel-mode operations

The network segment separating internal and external systems

The time limit for administrator account usage

The maximum number of failed login attempts allowed

7. What is the primary advantage of using encrypted communication channels during exploitation?

Evading network-based intrusion detection systems

Increasing the speed of payload delivery

Reducing the size of malicious payloads

Automatically disabling antivirus software

8. Which of the following best describes a backdoor in post-exploitation?

A hidden method to regain access to a compromised system

The main entrance to a building housing network infrastructure

A legitimate administrative account for system maintenance

A firewall rule that allows all outbound traffic

9. What is pass-the-hash (PtH) in Windows environments?

Using captured password hashes to authenticate without knowing the plaintext password

Converting plaintext passwords into hash values for storage

Cracking password hashes using rainbow tables

Verifying password strength based on hash complexity

10. Which attack exploits a vulnerability in an application before a patch is available?

Zero-day exploit

Brute-force attack

Dictionary attack

Replay attack

11. Which of the following best describes a reverse shell in the context of exploitation?

A shell that connects back to the attacker's machine for remote command execution

A shell that runs only local commands on the target system

A shell that encrypts all network traffic automatically

A shell that requires the attacker to connect to a listening port on the target

12. Which technique involves injecting code into a running process to execute arbitrary commands?

Code injection

Code compilation

Code review

Code documentation

13. In exploitation, what is a shellcode?

Machine code that executes commands, often used in buffer overflow exploits

A script that removes shells from data storage

A protective shell around network packets

A shell script that configures system security

14. What does UAC (User Account Control) protect against?

Unauthorized privilege escalation attempts to administrator level

Network-based denial-of-service attacks

Phishing email detection

Unauthorized file deletion by any user

15. Which Windows utility is commonly exploited for living-off-the-land attacks?

PowerShell

Notepad

Calculator

Paint

16. What is a living-off-the-land attack?

Using legitimate system tools and processes already present to conduct attacks

Attacking rural or remote network infrastructure

Using only open-source penetration testing frameworks

Conducting attacks during off-hours to avoid detection

17. Which of the following is a common method for delivering malicious payloads?

Phishing emails with malicious attachments

Direct network packet inspection

Passive vulnerability scanning

Firewall rule modifications

18. In post-exploitation, what is the purpose of establishing persistence?

To maintain access to the compromised system even after reboot or credential changes

To immediately delete all logs on the target

To scan the network for additional vulnerabilities

To steal all user credentials at once

19. Which technique allows an attacker to move from one compromised system to another within a network?

Lateral movement

Vertical escalation

Network reconnaissance

Social engineering

20. What is the primary goal of privilege escalation in a penetration test?

To obtain administrative or root-level access from a lower-privilege account

To encrypt sensitive data on the target system

To identify all user accounts on the network

To disable the target system's firewall