You are a penetration tester and have been given authorization to test a specific web application. During testing, you discover that the application is hosted on a server that also hosts other applications for different clients. You find a vulnerability that could affect the other applications. What is the most ethical course of action?

Exploit the vulnerability to demonstrate the risk to the client, even though it may affect other applications.

Continue testing the vulnerability to determine the full impact on the other applications.

Ignore the vulnerability because it is not directly related to the application you are testing.

Stop testing the vulnerability and report it to the client, noting that it may affect other applications hosted on the same server.

EC-CouncilCertified Ethical Hacker

Domain 3Objective 3

Vulnerability Exploitation and Metasploit CEH Practice Questions (Page 10)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

14concepts

14 Concepts in This Objective

Vulnerability Exploitation Fundamentals
Exploitation Phases and Methodology
Metasploit Framework Architecture
Metasploit Module Types
Metasploit Command-Line Interface
Exploit Selection and Configuration
Payload Generation and Selection
Running Exploits and Handling Sessions
Post-Exploitation Techniques
Metasploit Auxiliary Modules
Evasion and Anti-Virus Bypass
Metasploit Database Integration
Metasploit Scripting and Automation
Ethical and Legal Considerations

Questions 46–48

46expert · hard
You are a penetration tester and have been given authorization to test a specific web application. During testing, you discover that the application is hosted on a server that also hosts other applications for different clients. You find a vulnerability that could affect the other applications. What is the most ethical course of action?
Select an answer first
47application · medium
You are using Metasploit and have imported Nmap scan results into the database. You want to find an exploit for a service running on a specific host. Which command should you use to view the services and then search for a matching exploit?
Select an answer first
48foundation · easy
In msfconsole, which command is used to search for a module by name or CVE?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Vulnerability Exploitation and Metasploit CEH Practice Questions (Page 10)

Questions 46–48

You are using Metasploit and have imported Nmap scan results into the database. You want to find an exploit for a service running on a specific host. Which command should you use to view the services and then search for a matching exploit?

In msfconsole, which command is used to search for a module by name or CVE?

Keep studying — System Hacking Phases and Attack Techniques