What is the goal of persistence in post-exploitation?

To cover tracks by deleting logs.

To escalate privileges to administrator or root.

To gather sensitive information from the target.

To maintain access to the compromised system across reboots or reconnections.

You are automating a repetitive exploitation workflow for a set of authorized targets. You want to run a series of Metasploit commands automatically each time you start msfconsole, including setting up a listener and running an exploit. Which approach is the most efficient and repeatable?

Create a batch file that starts msfconsole and then uses `sendkeys` to simulate keystrokes.

Create a resource script with the commands and run it with `msfconsole -r script.rc`

Use the Metasploit API to write a Python script that calls the exploit module directly.

Manually type the commands each time and save the output to a log file.

During the enumeration phase of a penetration test, you need to identify whether any hosts on a subnet are vulnerable to a specific SMB vulnerability before attempting exploitation. You have already imported Nmap results into the Metasploit database. Which Metasploit auxiliary module is most appropriate for this task?

`exploit/windows/smb/ms17_010_eternalblue`

`auxiliary/scanner/portscan/tcp`

`auxiliary/scanner/smb/smb_ms17_010`

When selecting an exploit in Metasploit, which of the following is the most important factor to consider?

The color of the target's logo.

The target's operating system and version.

The target's physical location.

EC-CouncilCertified Ethical Hacker

Domain 3Objective 3

Vulnerability Exploitation and Metasploit CEH Practice Questions (Page 4)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

14concepts

14 Concepts in This Objective

Vulnerability Exploitation Fundamentals
Exploitation Phases and Methodology
Metasploit Framework Architecture
Metasploit Module Types
Metasploit Command-Line Interface
Exploit Selection and Configuration
Payload Generation and Selection
Running Exploits and Handling Sessions
Post-Exploitation Techniques
Metasploit Auxiliary Modules
Evasion and Anti-Virus Bypass
Metasploit Database Integration
Metasploit Scripting and Automation
Ethical and Legal Considerations

Questions 16–20

16foundation · easy
What is the goal of persistence in post-exploitation?
Select an answer first
17foundation · easy
Which Metasploit module type is used to perform scanning, fuzzing, and other pre-exploitation tasks?
Select an answer first
18application · medium
You are automating a repetitive exploitation workflow for a set of authorized targets. You want to run a series of Metasploit commands automatically each time you start msfconsole, including setting up a listener and running an exploit. Which approach is the most efficient and repeatable?
Select an answer first
19application · medium
During the enumeration phase of a penetration test, you need to identify whether any hosts on a subnet are vulnerable to a specific SMB vulnerability before attempting exploitation. You have already imported Nmap results into the Metasploit database. Which Metasploit auxiliary module is most appropriate for this task?
Select an answer first
20foundation · easy
When selecting an exploit in Metasploit, which of the following is the most important factor to consider?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Vulnerability Exploitation and Metasploit CEH Practice Questions (Page 4)

Questions 16–20

What is the goal of persistence in post-exploitation?

Which Metasploit module type is used to perform scanning, fuzzing, and other pre-exploitation tasks?

You are automating a repetitive exploitation workflow for a set of authorized targets. You want to run a series of Metasploit commands automatically each time you start msfconsole, including setting up a listener and running an exploit. Which approach is the most efficient and repeatable?

When selecting an exploit in Metasploit, which of the following is the most important factor to consider?

Keep studying — System Hacking Phases and Attack Techniques