You need to deliver a Meterpreter payload to a Windows target that has antivirus software. The payload is being detected by signature-based AV. Which technique is most likely to bypass the AV?

Use a custom-written loader that decrypts and executes the payload in memory.

Encode the payload with x86/shikata_ga_nai.

Use a staged payload instead of a stageless payload.

Use msfvenom to generate a custom payload with a template and then pack it with a tool like UPX.

EC-CouncilCertified Penetration Testing Professional

Domain 6Objective 3

Mastering the Metasploit Framework CPENT Practice Questions (Page 3)

Part of the Advanced Exploitation and IoT domain, which makes up ~17% of our current practice bank.

44questions here

9free pages

12concepts

Questions 11–15

11application · easy
You are writing a custom Metasploit module to test a proprietary protocol. You need to decide which module type to use. The module will send a series of malformed packets to a service and observe responses. Which module type should you use?
Select an answer first
12foundation · easy
Which Metasploit tool is commonly used to generate an obfuscated payload to bypass antivirus?
Select an answer first
13application · hard
You need to deliver a Meterpreter payload to a Windows target that has antivirus software. The payload is being detected by signature-based AV. Which technique is most likely to bypass the AV?
Select an answer first
14application · easy
You have run an Nmap scan and saved the results in XML format. You want to import these results into Metasploit's database to use with the 'hosts' and 'services' commands. Which command should you use?
Select an answer first
15foundation · easy
Which of the following is a core component of the Metasploit Framework that contains the actual code to perform a specific attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.

Mastering the Metasploit Framework CPENT Practice Questions (Page 3)

Questions 11–15

You are writing a custom Metasploit module to test a proprietary protocol. You need to decide which module type to use. The module will send a series of malformed packets to a service and observe responses. Which module type should you use?

Which Metasploit tool is commonly used to generate an obfuscated payload to bypass antivirus?

You need to deliver a Meterpreter payload to a Windows target that has antivirus software. The payload is being detected by signature-based AV. Which technique is most likely to bypass the AV?

You have run an Nmap scan and saved the results in XML format. You want to import these results into Metasploit's database to use with the 'hosts' and 'services' commands. Which command should you use?

Which of the following is a core component of the Metasploit Framework that contains the actual code to perform a specific attack?

Keep studying — Advanced Exploitation and IoT