Objective 1.2 Select and Launch Exploits Using Metasploit. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security analyst is documenting the Metasploit Framework for a report. The analyst needs to explain the purpose of the framework. Which statement accurately describes the primary purpose of the Metasploit Framework?

   • AIt provides a platform for developing, testing, and executing exploits against target systems.
   • BIt is a log analysis tool for reviewing system and network logs.
   • CIt is a firewall management tool for configuring network security rules.
   • DIt is a vulnerability scanner that automatically patches identified vulnerabilities.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In Metasploit, what does the 'RHOSTS' option specify for an exploit module?

   • AThe IP address or hostname of the target system
   • BThe type of operating system running on the target
   • CThe local port on the attacker's machine that will be used for the connection
   • DThe payload that will be used after the exploit succeeds
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A penetration tester is looking for a Metasploit module to exploit a vulnerability in a web application. The tester knows the CVE ID but is unsure if the module is an exploit or auxiliary. The tester wants to find all modules related to the CVE, regardless of type. Which search command should the tester use?

   • Asearch type:exploit cve:2021-1234
   • Binfo cve:2021-1234
   • Csearch name:2021-1234
   • Dsearch cve:2021-1234
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   After selecting an exploit module in Metasploit, which command is used to view all the configurable options for that module?

   • Alist options
   • Bprint settings
   • Cshow options
   • Ddisplay config
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A penetration tester is setting up an exploit that will use a reverse Meterpreter payload. The tester needs to specify the IP address and port that the target will connect back to. Which options must be set?

   • ASRVHOST and SRVPORT
   • BRHOSTS and RPORT
   • CPAYLOAD and ENCODER
   • DLHOST and LPORT
   Reveal Solution Discussion Select an answer first