What is the purpose of the Metasploit database integration?

To provide a GUI for Metasploit.

To increase the speed of exploits.

To store scan results, host information, and vulnerability data for efficient workflow.

To replace the need for a payload.

You are performing a client-side attack and need to deliver a payload to a Windows user. The target machine is behind a NAT that blocks inbound connections, but outbound connections are allowed. You also need to avoid detection by the user's antivirus. Which payload and delivery method is most appropriate?

Use a reverse HTTP payload and send it as an email attachment without encoding.

Use a bind shell payload and deliver it via a USB drop.

Generate a bind TCP Meterpreter payload and have the user execute it, then connect to the target's IP.

Generate a reverse TCP Meterpreter payload with msfvenom, encode it with shikata_ga_nai, and host it on a web server for the user to download.

What is the purpose of the 'background' command in Metasploit when working with a session?

To put the current session into the background so you can return to msfconsole.

To terminate the current session.

To upgrade the session to a meterpreter session.

To run a post-exploitation module.

EC-CouncilCertified Ethical Hacker

Domain 3Objective 3

Vulnerability Exploitation and Metasploit CEH Practice Questions (Page 3)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

14concepts

14 Concepts in This Objective

Vulnerability Exploitation Fundamentals
Exploitation Phases and Methodology
Metasploit Framework Architecture
Metasploit Module Types
Metasploit Command-Line Interface
Exploit Selection and Configuration
Payload Generation and Selection
Running Exploits and Handling Sessions
Post-Exploitation Techniques
Metasploit Auxiliary Modules
Evasion and Anti-Virus Bypass
Metasploit Database Integration
Metasploit Scripting and Automation
Ethical and Legal Considerations

Questions 11–15

11foundation · easy
What is the purpose of the Metasploit database integration?
Select an answer first
12expert · hard
You are performing a client-side attack and need to deliver a payload to a Windows user. The target machine is behind a NAT that blocks inbound connections, but outbound connections are allowed. You also need to avoid detection by the user's antivirus. Which payload and delivery method is most appropriate?
Select an answer first
13foundation · easy
After selecting a Metasploit module with the 'use' command, which command is used to view the module's configurable options?
Select an answer first
14application · medium
You are using Metasploit to perform a comprehensive assessment. You need to run a module that does not directly exploit a vulnerability but instead performs a brute-force attack against an SSH service. Which type of Metasploit module should you use?
Select an answer first
15foundation · easy
What is the purpose of the 'background' command in Metasploit when working with a session?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Vulnerability Exploitation and Metasploit CEH Practice Questions (Page 3)

Questions 11–15

What is the purpose of the Metasploit database integration?

After selecting a Metasploit module with the 'use' command, which command is used to view the module's configurable options?

You are using Metasploit to perform a comprehensive assessment. You need to run a module that does not directly exploit a vulnerability but instead performs a brute-force attack against an SSH service. Which type of Metasploit module should you use?

What is the purpose of the 'background' command in Metasploit when working with a session?

Keep studying — System Hacking Phases and Attack Techniques