Objective 1.2 Select and Launch Exploits Using Metasploit. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A penetration tester is assessing a legacy Windows Server 2003 system that is exposed to the internet. The tester knows the system is vulnerable to MS08-067 but cannot recall the exact Metasploit module name. Which command should the tester run to locate the appropriate exploit module?

   • Asearch ms08-067
   • Bshow payloads
   • Cinfo exploit/windows/smb/ms08_067_netapi
   • Duse exploit/windows/smb/ms08_067_netapi
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In the architecture of the Metasploit Framework, what is the role of the 'console' interface?

   • AIt is a command-line interface that allows users to interact with the framework to select, configure, and run modules
   • BIt is a web-based dashboard for managing the results of completed penetration tests
   • CIt is the graphical user interface used exclusively for creating new exploit modules
   • DIt is a scripting engine used to automate the compilation of C code for custom exploits
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Why is a 'reverse shell' often preferred over a 'bind shell' when attacking a target on the internet?

   • AReverse shells are less likely to be detected by antivirus software
   • BReverse shells do not require the attacker to have a public IP address
   • CReverse shells are faster and more reliable than bind shells
   • DReverse shells can bypass firewalls that block inbound connections but allow outbound traffic
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a key feature that distinguishes the Meterpreter payload from a standard command shell payload?

   • AMeterpreter provides an interactive command-line interface on the target system
   • BMeterpreter is a compiled binary that is smaller and faster than a standard shell
   • CMeterpreter can only be used on Windows operating systems
   • DMeterpreter operates entirely in memory and provides a powerful, extensible post-exploitation platform
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A penetration tester has successfully exploited a target and needs to perform post-exploitation activities such as gathering system information, capturing keystrokes, and pivoting to other hosts. Which payload should the tester have selected to provide the most comprehensive set of post-exploitation features?

   • ABind shell
   • BMeterpreter
   • CRuby payload
   • DReverse shell
   Reveal Solution Discussion Select an answer first