PenTest+ V2 Tools: Nmap Metasploit Burp Suite

1. In Metasploit, what does 'exploit' module do?

Delivers payload to target vulnerability

Encodes payload to evade detection

Listens for incoming connections

Scans for open ports

2. In Metasploit, the 'multi/handler' is configured with which parameter to receive connections?

Set LHOST

Set RHOST

Set PAYLOAD

Set ENCODER

3. What is the Nmap output format (-oX) used for?

Plain text output

XML format for parsing and integration

PDF report generation

CSV spreadsheet export

4. Burp Suite's 'Site Map' feature displays:

Network topology diagram

Crawled URLs, endpoints, and request history

Vulnerability severity ratings

Open ports on target

5. In Metasploit, 'sessions' allow you to:

View active connections to compromised targets

Configure exploit options

Search for vulnerabilities

Generate payloads

6. Which Nmap script category detects default credentials?

Vuln

Brute

Auth

Discovery

7. Burp Suite's 'Comparer' tool helps identify differences between:

Two HTTP requests or responses

Scanner reports only

Metasploit modules

Nmap scan results

8. In Metasploit, 'handlers' are used to:

Encode payloads for obfuscation

Receive reverse connections from exploited targets

Scan network vulnerabilities

Generate shellcode

9. What does the Nmap flag -sU perform?

TCP SYN scan

UDP port scan

ICMP ping sweep

ARP scan

10. Burp Suite's 'Repeater' tool is primarily used for:

Automated scanning of all endpoints

Manual request modification and response analysis

Brute-forcing authentication

Generating test reports

11. Which Nmap flag enables OS fingerprinting and service version detection?

-sV

-O

-A

-sS

12. Which Nmap command lists all available scripts in the NSE library?

--script-list

--script-help

--list-scripts

--show-scripts

13. In Burp Suite, the 'Scanner' tool automatically identifies which vulnerability class?

Logic flaws and business logic bypasses

OWASP Top 10 and common web vulnerabilities

Cryptographic weaknesses only

Network layer attacks

14. What is the Metasploit module type used for vulnerability scanning?

Auxiliary

Exploit

Payload

Encoder

15. Which Nmap option (-p) specifies port range scanning?

-p 1-65535

-p all

-p common

-p range

16. In Burp Suite Intruder, what does a 'sniper' attack do?

Tests one parameter at a time with multiple payloads

Combines all payload positions simultaneously

Performs brute-force on all fields

Scans for SQL injection only

17. What does Metasploit's 'set PAYLOAD' command specify?

Target IP address

Exploit delivery mechanism and post-exploitation code

Encoding method only

Listener port number

18. Which Nmap scan type (-sT) performs a full TCP three-way handshake?

Stealth scan

Connect scan

Null scan

ACK scan

19. In Burp Suite, which tool intercepts and modifies HTTP/HTTPS traffic in real-time?

Repeater

Intruder

Proxy

Scanner

20. What is the primary purpose of Metasploit's meterpreter payload?

Port scanning and enumeration

In-memory shell with post-exploitation capabilities

Firewall rule generation

Wireless network cracking

PenTest+ V2 Nmap Metasploit and Burp Suite Roles Quiz