Post-Exploitation (PenTest+) Persistence & Pivoting Quiz

Submit

2. Which tool is commonly used to perform privilege escalation through kernel exploitation on Linux systems?

Hydra

Metasploit framework

Wireshark

Nmap

3. True or False: Persistence through web shell installation requires web server write permissions.

True

False

Submit

5. In Post-Exploitation (PenTest+) assessments, what is the primary goal of data exfiltration?

To delete sensitive information

To extract confidential data without detection

To encrypt system files

To modify audit logs

6. Which persistence method uses scheduled tasks or cron jobs to execute payloads at specific intervals?

Startup folder modification

Scheduled task/cron job creation

Browser extension injection

Firmware implantation

7. True or False: UAC (User Account Control) bypass techniques can elevate privileges from standard user to administrator on Windows systems.

True

False

Submit

9. Which network reconnaissance technique is used to map accessible systems during pivoting?

Ping sweep and port scanning

DNS poisoning

ARP spoofing

ICMP tunneling

10. True or False: Credential dumping tools like Mimikatz extract plaintext passwords from system memory.

True

False

11. Which persistence technique involves modifying system startup files to execute malicious code automatically upon boot?

Registry Run keys modification

Scheduled task creation

Service installation

All of the above

12. What is the purpose of establishing a reverse shell during post-exploitation?

To encrypt network traffic

To gain interactive command-line access to the compromised system

To scan for open ports

To disable firewall rules

13. Which privilege escalation vector exploits unpatched kernel vulnerabilities?

UAC bypass

Kernel exploit

Scheduled task hijacking

Registry modification

14. True or False: Pass-the-ticket attacks allow lateral movement without needing the actual plaintext password.

True

False

Submit

16. Which technique involves using legitimate system tools to conduct attacks while avoiding detection?

Brute forcing

Living off the land attacks

SQL injection

Buffer overflow

17. In Post-Exploitation (PenTest+) scenarios, what is privilege escalation primarily used for?

Gaining higher-level access to perform unrestricted actions

Documenting vulnerability findings

Creating audit logs

Notifying system administrators

18. Which Windows feature allows an attacker to maintain persistence by creating a backdoor user account?

Windows Defender

Local user creation and group policy assignment

BitLocker encryption

Windows Update mechanism

19. Lateral movement across network segments is best achieved through which method?

Direct SSH connections using default credentials

Pass-the-hash attacks or credential harvesting

Broadcasting ARP requests

Modifying firewall logs

20. What is the primary advantage of using a DLL injection technique for persistence?

It requires administrator privileges

It operates in legitimate process memory, evading detection

It only works on Windows Server systems

It automatically disables antivirus software

Post-Exploitation Quiz: Can You Master Persistence & Pivoting?

1. Rootkits are primarily used in post-exploitation to____.

2.

What first name or nickname would you like us to use?

2. Which tool is commonly used to perform privilege escalation through kernel exploitation on Linux systems?

3. True or False: Persistence through web shell installation requires web server write permissions.

4. Kerberoasting is a lateral movement technique that targets ____ authentication protocol.

5. In Post-Exploitation (PenTest+) assessments, what is the primary goal of data exfiltration?

6. Which persistence method uses scheduled tasks or cron jobs to execute payloads at specific intervals?

7. True or False: UAC (User Account Control) bypass techniques can elevate privileges from standard user to administrator on Windows systems.

8. A ____ proxy allows an attacker to route traffic through a compromised system to access internal networks.

9. Which network reconnaissance technique is used to map accessible systems during pivoting?

10. True or False: Credential dumping tools like Mimikatz extract plaintext passwords from system memory.

11. Which persistence technique involves modifying system startup files to execute malicious code automatically upon boot?

12. What is the purpose of establishing a reverse shell during post-exploitation?

13. Which privilege escalation vector exploits unpatched kernel vulnerabilities?

14. True or False: Pass-the-ticket attacks allow lateral movement without needing the actual plaintext password.

15. A persistence mechanism that executes code through Windows Management Instrumentation is called____.

16. Which technique involves using legitimate system tools to conduct attacks while avoiding detection?

17. In Post-Exploitation (PenTest+) scenarios, what is privilege escalation primarily used for?

18. Which Windows feature allows an attacker to maintain persistence by creating a backdoor user account?

19. Lateral movement across network segments is best achieved through which method?

20. What is the primary advantage of using a DLL injection technique for persistence?