Pentest Tools Quiz: Nmap, Burp, Metasploit & Hydra

1. Which Metasploit component stores exploit code and payloads?

Framework

Module

Database

Handler

2. Hydra's -P flag is used to specify which of the following?

Target port number

Password wordlist file

Protocol type

Parallel thread count

3. Metasploit's msfconsole is which type of interface?

Graphical user interface

Web-based dashboard

Command-line interface

Mobile application

4. In Burp Suite, what does the Comparer tool help testers analyze?

Differences between HTTP requests and responses

Vulnerability severity ratings

Payload effectiveness metrics

Network latency

5. Nmap's -A flag combines which scanning techniques?

OS detection and version scanning only

OS detection, version scanning, script scanning, and traceroute

Aggressive port scanning only

All vulnerability scans

6. Hydra's -l flag specifies which of the following?

Target login username

Wordlist file location

Attack loop count

Logging output

7. What is a 'meterpreter' in Metasploit?

A metric measurement tool

An advanced in-memory payload with extensive post-exploitation capabilities

A network scanning module

A firewall detection tool

8. Burp Suite's Scanner tool performs which type of security assessment?

Manual code review

Automated vulnerability scanning

Network topology mapping

Password policy audits

9. Which Nmap scan is used to identify firewalled ports?

SYN Scan

FIN Scan

Ping Scan

Idle Scan

10. Hydra uses wordlists for brute-force attacks. What format is typically required?

One entry per line in a text file

Comma-separated values only

JSON format only

Binary encrypted format

11. Which Nmap scan type sends TCP SYN packets without completing the three-way handshake?

TCP Connect Scan

SYN Stealth Scan

UDP Scan

ACK Scan

12. Burp Suite's Proxy tool intercepts traffic by default on which port?

8080

443

80

9090

13. What does the Nmap -O flag enable?

Open port detection

Operating system detection

Output formatting

Optimization mode

14. Hydra supports attacks against which of the following protocols?

SSH, HTTP, FTP only

SSH, HTTP, FTP, SNMP, and many others

HTTP and HTTPS only

FTP only

15. In Metasploit, a 'session' is established after which event?

Scanning a target

Encoding a payload

Successfully exploiting a vulnerability

Loading a module

16. What does Burp Suite's Repeater tool allow a tester to do?

Automatically fix vulnerabilities

Manually modify and resend HTTP requests

Generate random payloads

Scan multiple targets simultaneously

17. Which Nmap flag is used to specify a range of ports to scan?

-p

-P

-s

-r

18. Hydra is primarily used for which type of attack?

SQL injection

Cross-site scripting

Brute-force credential attacks

Buffer overflow

19. In Metasploit, what term describes a piece of code that runs after successful exploitation?

Encoder

Payload