Objective 1.2 Select and Launch Exploits Using Metasploit. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary function of an 'auxiliary' module in the Metasploit Framework?

   • ATo deliver a malicious payload to a target after an exploit has been successful
   • BTo encode a payload to evade antivirus detection during delivery
   • CTo provide a post-exploitation interface for interacting with a compromised system
   • DTo perform actions like scanning, fuzzing, or denial-of-service without establishing a shell session
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   A penetration tester wants to find all Metasploit modules that target the Windows platform. Which search command would achieve this?

   • Asearch os:windows
   • Bsearch platform:windows
   • Cshow windows
   • Dinfo platform:windows
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the defining characteristic of a 'reverse shell' payload?

   • AThe target machine initiates a connection back to the attacker's machine
   • BThe attacker machine initiates a connection to the target's listening port
   • CThe payload is embedded in a legitimate application and executes on the target
   • DThe payload runs only on the attacker's machine to simulate a shell
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A new member of a security team is learning how to use Metasploit. The team lead explains that Metasploit provides a modular architecture where different components can be combined. The new member asks which component is responsible for the actual code that runs on the target after a successful exploit. What is the correct answer?

   • AAuxiliary
   • BExploit
   • CPayload
   • DEncoder
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the main advantage of using a Ruby or Perl-based payload in Metasploit?

   • AThey are compiled binaries that are smaller and faster than other payloads
   • BThey are undetectable by all antivirus and endpoint protection software
   • CThey can run on any system that has the respective interpreter installed, providing cross-platform compatibility
   • DThey do not require any network connection to the target system
   Reveal Solution Discussion Select an answer first