Network Security Assessment Techniques and Tools CCT Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A penetration tester is planning an assessment of a client's external network. The client has provided a list of public IP ranges and wants to minimize the risk of disrupting production services. Which phase of the assessment should the tester perform first to understand the target environment without sending intrusive traffic?

   • AExploitation
   • BPlanning and reconnaissance
   • CActive scanning
   • DReporting
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary purpose of an exploitation framework like Metasploit?

   • ATo monitor network traffic for suspicious activity
   • BTo scan for open ports on a network
   • CTo automate the process of exploiting known vulnerabilities
   • DTo generate security audit reports
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   You need to discover all live hosts on a network segment and identify the operating system of each host. Which Nmap command accomplishes this?

   • Anmap -p 80 192.168.1.0/24
   • Bnmap -sV 192.168.1.0/24
   • Cnmap -O 192.168.1.0/24
   • Dnmap -sn 192.168.1.0/24
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   In the context of penetration testing, what is a 'payload' in Metasploit?

   • AA report generated after the test
   • BA piece of code that runs on the target after exploitation to achieve a goal
   • CA vulnerability database used to identify weaknesses
   • DA tool used to scan for open ports
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst is performing reconnaissance on a target organization. The analyst queries the target's DNS records, reviews job postings, and browses public social media profiles to gather employee names and email formats. The analyst has not sent any packets directly to the target's network. What type of reconnaissance is this, and what is the next logical step in the assessment methodology?

   • APassive reconnaissance; proceed to active scanning and enumeration
   • BActive reconnaissance; proceed directly to exploitation
   • CActive reconnaissance; proceed to vulnerability scanning
   • DPassive reconnaissance; proceed directly to reporting
   Reveal Solution Discussion Select an answer first