You have a Meterpreter session on a compromised Linux host and need to maintain access after a reboot. Which approach is most appropriate for persistence?

Add a cron job that executes a reverse shell payload.

Migrate the Meterpreter process to the init process.

Upload a Metasploit service script to /etc/init.d/.

Use the 'run persistence' command with a reverse payload.

You are using an exploit module in msfconsole. You have set the RHOSTS and PAYLOAD options, but when you run the exploit, you get an error that the payload is incompatible with the target. What is the most likely cause?

The exploit module requires a different payload type, such as a staged payload.

The target's operating system is not supported by the payload.

The RHOSTS option is set to an invalid IP address.

EC-CouncilCertified Penetration Testing Professional

Domain 6Objective 3

Mastering the Metasploit Framework CPENT Practice Questions (Page 5)

Part of the Advanced Exploitation and IoT domain, which makes up ~17% of our current practice bank.

44questions here

9free pages

12concepts

Questions 21–25

21application · medium
You are using Metasploit to exploit a target. You have imported Nmap results into the database and want to automatically set the RHOSTS option based on the discovered hosts. Which command should you use?
Select an answer first
22application · medium
You have a Meterpreter session on a compromised Linux host and need to maintain access after a reboot. Which approach is most appropriate for persistence?
Select an answer first
23application · medium
You are using an exploit module in msfconsole. You have set the RHOSTS and PAYLOAD options, but when you run the exploit, you get an error that the payload is incompatible with the target. What is the most likely cause?
Select an answer first
24foundation · easy
After successfully exploiting a target, a tester wants to run commands on the compromised system. Which type of Metasploit module or component provides this capability?
Select an answer first
25foundation · easy
Which type of Metasploit module is typically used to perform fuzzing against a target application?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.

Mastering the Metasploit Framework CPENT Practice Questions (Page 5)

Questions 21–25

You are using Metasploit to exploit a target. You have imported Nmap results into the database and want to automatically set the RHOSTS option based on the discovered hosts. Which command should you use?

You have a Meterpreter session on a compromised Linux host and need to maintain access after a reboot. Which approach is most appropriate for persistence?

You are using an exploit module in msfconsole. You have set the RHOSTS and PAYLOAD options, but when you run the exploit, you get an error that the payload is incompatible with the target. What is the most likely cause?

After successfully exploiting a target, a tester wants to run commands on the compromised system. Which type of Metasploit module or component provides this capability?

Which type of Metasploit module is typically used to perform fuzzing against a target application?

Keep studying — Advanced Exploitation and IoT