PenTest Plus V3 Post Exploitation Activities

1. What is the advantage of using a reverse shell during post-exploitation?

It gives the attacker remote command execution capability

It encrypts all network traffic

It automatically patches vulnerabilities

It deletes all system logs

2. Steganography can be used during post-exploitation to hide data within images or other files. True or False?

True

False

3. Which post-exploitation technique involves capturing network traffic to gather credentials?

Packet sniffing

Port forwarding

DNS enumeration

Service enumeration

4. What is the primary purpose of establishing a command and control (C2) channel?

To maintain persistent remote access and communicate with the compromised system

To scan for vulnerabilities in the network

To monitor user login attempts

To block malicious traffic

5. Timestomping is a technique used to modify file metadata to hide when files were accessed. True or False?

True

False

6. Which tool is commonly used to dump credentials from Windows systems?

Mimikatz

Wireshark

Nessus

Metasploit Framework

Submit

8. What does the SAM file in Windows contain?

User account credentials and password hashes

Network configuration settings

Installed software registry

System performance logs

9. Clearing Windows Event Logs helps attackers cover their tracks. True or False?

True

False

10. Which technique involves creating a fake user account to maintain access?

Account creation

Credential dumping

Token impersonation

Session hijacking

11. What is the primary goal of post-exploitation activities in a penetration test?

To maintain access and gather intelligence

To immediately exit the target system

To crash the target network

To notify the system administrator immediately

Submit

13. Which protocol is commonly used for covert data exfiltration to avoid detection?

DNS tunneling

HTTP GET requests

ICMP echo

SMTP plaintext

14. Data exfiltration is the process of stealing sensitive information from a compromised system. True or False?

True

False

15. Which log file is commonly targeted when covering tracks on Linux systems?

/var/log/auth.log

/etc/passwd

/proc/meminfo

/boot/grub/grub.cfg

16. What is the purpose of covering tracks during post-exploitation?

To avoid detection and hide evidence of the attack

To document all activities for the client

To speed up system performance

To restore all deleted files

17. Lateral movement refers to moving from one system to another within a network. True or False?

True

False

18. Which of the following is a common method for establishing persistence on a Windows system?

Registry modification

DNS spoofing

Port scanning

SSL stripping

19. What is privilege escalation in the context of post-exploitation?

Gaining higher-level permissions on a system

Logging out of a system

Scanning for open ports

Creating a backup of system files

20. Which technique allows an attacker to maintain long-term access to a compromised system?

Persistence

Reconnaissance

Lateral movement

Vulnerability scanning

PenTest Plus V3 Post Exploitation Activities Quiz

1. What is the advantage of using a reverse shell during post-exploitation?

2.

What first name or nickname would you like us to use?

2. Steganography can be used during post-exploitation to hide data within images or other files. True or False?

3. Which post-exploitation technique involves capturing network traffic to gather credentials?

4. What is the primary purpose of establishing a command and control (C2) channel?

5. Timestomping is a technique used to modify file metadata to hide when files were accessed. True or False?

6. Which tool is commonly used to dump credentials from Windows systems?

7. A ____ is a scheduled task or cron job used to maintain persistence on a system.

8. What does the SAM file in Windows contain?

9. Clearing Windows Event Logs helps attackers cover their tracks. True or False?

10. Which technique involves creating a fake user account to maintain access?

11. What is the primary goal of post-exploitation activities in a penetration test?

12. A rootkit is a type of malware that provides ____ -level access to a system.

13. Which protocol is commonly used for covert data exfiltration to avoid detection?

14. Data exfiltration is the process of stealing sensitive information from a compromised system. True or False?

15. Which log file is commonly targeted when covering tracks on Linux systems?

16. What is the purpose of covering tracks during post-exploitation?

17. Lateral movement refers to moving from one system to another within a network. True or False?

18. Which of the following is a common method for establishing persistence on a Windows system?

19. What is privilege escalation in the context of post-exploitation?

20. Which technique allows an attacker to maintain long-term access to a compromised system?