You are automating a penetration test workflow that involves scanning, exploiting, and post-exploitation. You want to use Metasploit's scripting capabilities to run a sequence of commands and also conditionally execute post-exploitation modules based on the session type. Which approach is the most flexible and maintainable?

Use the Metasploit RPC API with a Python script to orchestrate the entire workflow.

Use the `msfconsole` `-x` option to run a single command string.

Create a series of separate resource scripts and run them sequentially from the command line.

Write a resource script that uses `if` statements and `get` commands to check session types.

You are performing a penetration test and need to identify which services are running on a range of hosts before selecting an exploit. You have already started the Metasploit database and want to store the results for later use. Which approach should you take?

Use the `scan` command inside msfconsole to perform a port scan and manually save the output to a file.

Use the `db_nmap` command to scan the subnet and automatically store the results in the Metasploit database.

Use the `auxiliary/scanner/portscan/tcp` module and then manually add each host to the database with `hosts -a`.

Run Nmap externally and then use `hosts -R` to import the results into the database.

You are in msfconsole and need to find an exploit for a web application vulnerability. You know the vulnerability is related to Apache Struts. Which command would you use to search for relevant modules?

`use exploit/multi/http/struts2_rest_xstream`

`info exploit/multi/http/struts2_rest_xstream`

You are a penetration tester hired to assess the security of a company's internal network. During the assessment, you discover a critical vulnerability in a third-party application that is not in the scope of your contract. What should you do?

Ignore the vulnerability because it is not in scope and do not mention it.

Stop testing and immediately report the vulnerability to the client, even though it is out of scope.

Continue with the in-scope testing and mention the vulnerability in your final report without exploiting it.

Exploit the vulnerability to prove the risk and include it in your report.

EC-CouncilCertified Ethical Hacker

Domain 3Objective 3

Vulnerability Exploitation and Metasploit CEH Practice Questions (Page 9)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

14concepts

14 Concepts in This Objective

Vulnerability Exploitation Fundamentals
Exploitation Phases and Methodology
Metasploit Framework Architecture
Metasploit Module Types
Metasploit Command-Line Interface
Exploit Selection and Configuration
Payload Generation and Selection
Running Exploits and Handling Sessions
Post-Exploitation Techniques
Metasploit Auxiliary Modules
Evasion and Anti-Virus Bypass
Metasploit Database Integration
Metasploit Scripting and Automation
Ethical and Legal Considerations

Questions 41–45

41foundation · easy
Which command is used to run a resource script in msfconsole?
Select an answer first
42expert · hard
You are automating a penetration test workflow that involves scanning, exploiting, and post-exploitation. You want to use Metasploit's scripting capabilities to run a sequence of commands and also conditionally execute post-exploitation modules based on the session type. Which approach is the most flexible and maintainable?
Select an answer first
43application · medium
You are performing a penetration test and need to identify which services are running on a range of hosts before selecting an exploit. You have already started the Metasploit database and want to store the results for later use. Which approach should you take?
Select an answer first
44application · medium
You are in msfconsole and need to find an exploit for a web application vulnerability. You know the vulnerability is related to Apache Struts. Which command would you use to search for relevant modules?
Select an answer first
45application · medium
You are a penetration tester hired to assess the security of a company's internal network. During the assessment, you discover a critical vulnerability in a third-party application that is not in the scope of your contract. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Vulnerability Exploitation and Metasploit CEH Practice Questions (Page 9)

Questions 41–45

Which command is used to run a resource script in msfconsole?

You are performing a penetration test and need to identify which services are running on a range of hosts before selecting an exploit. You have already started the Metasploit database and want to store the results for later use. Which approach should you take?

You are in msfconsole and need to find an exploit for a web application vulnerability. You know the vulnerability is related to Apache Struts. Which command would you use to search for relevant modules?

You are a penetration tester hired to assess the security of a company's internal network. During the assessment, you discover a critical vulnerability in a third-party application that is not in the scope of your contract. What should you do?

Keep studying — System Hacking Phases and Attack Techniques