Which basic evasion strategy can help an attacker avoid detection during lateral movement?

Using the same credentials for multiple systems

Performing lateral movement during business hours

Clearing event logs after each move

Using native Windows tools like PowerShell

You have compromised a Linux server that is behind a strict egress firewall that only allows outbound HTTP and HTTPS traffic. You need to access an internal web application that is only reachable from the Linux server. Your workstation is on the internet and can accept inbound connections. Which tool and technique would be most suitable for establishing a tunnel?

Use chisel with reverse port forwarding over HTTPS.

Use SOCKS proxy on the Linux server and connect from your workstation.

Use SSH with remote port forwarding over port 443.

Use netcat with a reverse shell over HTTP.

You have compromised a domain controller and extracted a Kerberos ticket-granting ticket (TGT) for a domain admin. You need to access a file server that is configured to require Kerberos authentication. Which technique is most appropriate?

Pass-the-Hash with the NTLM hash of the domain admin

EC-CouncilCertified Penetration Testing Professional

Domain 5Objective 2

Lateral Movement and Pivoting CPENT Practice Questions (Page 1)

Part of the Active Directory and Lateral Movement domain, which makes up ~8% of our current practice bank.

38questions here

8free pages

8concepts

Questions 1–5

1foundation · easy
Which basic evasion strategy can help an attacker avoid detection during lateral movement?
Select an answer first
2foundation · easy
Which of the following is a legitimate Windows remote management protocol that can be used to execute commands on remote systems?
Select an answer first
3expert · hard
You have compromised a Linux server that is behind a strict egress firewall that only allows outbound HTTP and HTTPS traffic. You need to access an internal web application that is only reachable from the Linux server. Your workstation is on the internet and can accept inbound connections. Which tool and technique would be most suitable for establishing a tunnel?
Select an answer first
4foundation · easy
Which tool is commonly used to execute commands on remote Windows systems using the SMB protocol?
Select an answer first
5expert · hard
You have compromised a domain controller and extracted a Kerberos ticket-granting ticket (TGT) for a domain admin. You need to access a file server that is configured to require Kerberos authentication. Which technique is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.

Lateral Movement and Pivoting CPENT Practice Questions (Page 1)

Questions 1–5

Which basic evasion strategy can help an attacker avoid detection during lateral movement?

Which of the following is a legitimate Windows remote management protocol that can be used to execute commands on remote systems?

Which tool is commonly used to execute commands on remote Windows systems using the SMB protocol?

You have compromised a domain controller and extracted a Kerberos ticket-granting ticket (TGT) for a domain admin. You need to access a file server that is configured to require Kerberos authentication. Which technique is most appropriate?

Keep studying — Active Directory and Lateral Movement