Mastering the Metasploit Framework CPENT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a Metasploit resource script?

   • AA file containing a series of Metasploit commands that can be executed automatically.
   • BA script that manages the Metasploit database.
   • CA script that generates payloads for multiple platforms.
   • DA script that updates the Metasploit framework.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which Metasploit command is used to add a route for pivoting through a compromised session?

   • Aroute add
   • Buse multi/manage/route
   • Csession -i
   • Dportfwd add
   Reveal Solution Discussion Select an answer first
4. 8application · easy

   During a penetration test, you need to identify which SMB versions are supported by a range of Windows hosts to select an appropriate exploit. Which Metasploit auxiliary module should you use?

   • Aexploit/windows/smb/ms17_010_eternalblue
   • Bscanner/smb/smb_login
   • Cscanner/smb/pipe_auditor
   • Dscanner/smb/smb_version
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   You are using msfconsole and need to search for a module that can perform a denial-of-service test against an FTP service. Which command should you use to find the module?

   • Asearch type:auxiliary name:ftp
   • Bsearch type:payload name:ftp
   • Csearch type:exploit name:ftp
   • Dsearch type:post name:ftp
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   You have a Meterpreter session on a compromised web server. You need to access an internal database server that is only reachable from the web server. Which Meterpreter command should you use to forward a local port to the database server?

   • Aroute add 10.0.0.5 255.255.255.255 1
   • Bportfwd add -L 127.0.0.1 -l 3306 -p 3306 -r 10.0.0.5
   • Csocks_proxy -p 1080
   • Dshell
   Reveal Solution Discussion Select an answer first