Objective 1.2 Select and Launch Exploits Using Metasploit. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A penetration tester is preparing to exploit a target and needs to select a payload. The tester wants a payload that provides a command-line interface on the target. Which type of module should the tester select?

   • AExploit
   • BPayload
   • CEncoder
   • DAuxiliary
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In Metasploit, what is the primary purpose of the 'cmd/unix/reverse_perl' payload?

   • ATo provide a Perl-based reverse shell on a Unix-like target system
   • BTo exploit a vulnerability in the Perl interpreter on the target system
   • CTo install the Perl interpreter on a target system that does not have it
   • DTo scan the target for Perl-based web applications
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security tester is looking for a Metasploit module to exploit a vulnerability in a Windows SMB service. The tester knows the platform is Windows and the service is SMB. Which search command should the tester use to find relevant exploit modules?

   • Ashow exploits
   • Bsearch smb
   • Csearch type:auxiliary platform:windows smb
   • Dsearch type:exploit platform:windows smb
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of the Metasploit Framework in a penetration testing context?

   • ATo automate the deployment of security patches across an enterprise network
   • BTo manage and enforce an organization's firewall rules and access control lists
   • CTo provide a structured platform for developing, testing, and executing exploit code against target systems
   • DTo continuously monitor network traffic for signs of intrusion and alert administrators
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security tester needs to verify that a specific port is open on a target before launching an exploit. The tester wants to use a Metasploit module that does not deliver a payload. Which type of module should the tester use?

   • APayload
   • BAuxiliary
   • CEncoder
   • DExploit
   Reveal Solution Discussion Select an answer first