Objective 1.2 Select and Launch Exploits Using Metasploit. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A penetration tester is targeting a Unix system that has Perl installed but does not have a compiler or common shell utilities. The tester needs a payload that will work on this system without requiring compilation. Which payload should the tester choose?

   • AWindows Meterpreter
   • BJava payload
   • CPerl reverse shell
   • DLinux x86 shell
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A penetration tester has obtained a Meterpreter session on a target. The tester needs to pivot to another host on the target's internal network. The tester has already added a route to the internal network. Which Meterpreter command should the tester use to start a SOCKS proxy for pivoting?

   • Arun post/multi/manage/autoroute
   • Bportfwd add -L 127.0.0.1 -l 8080 -p 445 -r 192.168.1.10
   • Cauxiliary/server/socks_proxy
   • Dshell
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst is looking for a Metasploit auxiliary module that can perform a port scan against a target network. The analyst wants to find modules that are specifically for scanning. Which search command should the analyst use?

   • Ashow auxiliary
   • Bsearch type:exploit portscan
   • Csearch portscan
   • Dsearch type:auxiliary portscan
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A penetration tester is configuring an exploit that uses a Meterpreter payload. The tester needs to ensure the payload is delivered reliably even if the target's antivirus is likely to detect common payloads. Which option should the tester configure to reduce the chance of detection?

   • ASet the RPORT to a non-standard port
   • BSet the payload to a bind shell
   • CSet the LHOST to a different IP
   • DSet an encoder to obfuscate the payload
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A penetration tester is conducting an assessment where the target is behind a firewall that only allows outbound HTTP and HTTPS traffic. The tester needs a stable interactive shell. The tester has control of a public server that can listen on port 443. Which payload configuration is most likely to succeed?

   • AReverse shell payload with LHOST set to the public server and LPORT set to 8080
   • BReverse Meterpreter payload with LHOST set to the public server and LPORT set to 443
   • CBind shell payload with RPORT set to 443
   • DMeterpreter bind payload with LPORT set to 443
   Reveal Solution Discussion Select an answer first