Objective 1.2 Select and Launch Exploits Using Metasploit. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 7)

Questions 31–32

1. 31application · medium

   A penetration tester is exploiting a vulnerability in a web application that runs behind a NAT gateway. The tester's machine is on the internet and the target is internal. The tester wants a shell that will not require the target to accept an inbound connection. Which payload type should the tester select?

   • AReverse shell
   • BBind shell
   • CMeterpreter
   • DRuby shell
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A security consultant is performing an internal penetration test. The consultant has direct network access to a target server and wants to obtain a shell. The consultant knows that outbound connections from the target are restricted by a firewall, but inbound connections to the target are allowed. Which payload should the consultant use?

   • AReverse shell
   • BBind shell
   • CGeneric payload
   • DMeterpreter reverse
   Reveal Solution Discussion Select an answer first