You need to run a series of Metasploit commands automatically every time you start a penetration test against a new client. The commands include setting up the database, creating a workspace, and running an Nmap scan. What is the most efficient way to do this?

Write a resource script with the commands and run it with the -r option when starting msfconsole.

Manually type the commands each time you start a new engagement.

Use the msfconsole -x option to run a single command, and repeat it for each command.

Create a bash script that launches msfconsole and uses 'echo' to send commands to it.

After compromising a Windows domain controller, you need to extract password hashes from the SAM database to attempt offline cracking. Which Meterpreter command or module should you use?

run post/windows/gather/credentials/windows_autologin

You have a Meterpreter session on a compromised Windows server. You need to enumerate logged-on users, dump password hashes, and then move laterally to another machine on the same subnet. Which Meterpreter commands and modules should you use in order?

run post/windows/gather/enum_logged_on_users; hashdump; then use post/windows/gather/win_privs; set SESSION ; run

hashdump; run post/windows/gather/enum_logged_on_users; then use exploit/windows/smb/psexec; set PAYLOAD windows/meterpreter/reverse_tcp; set RHOST ; run

run post/windows/gather/enum_logged_on_users; hashdump; then use auxiliary/scanner/smb/smb_login; set RHOSTS ; run

use post/multi/gather/ping_sweep; set SESSION ; run; then hashdump; then run post/windows/gather/enum_logged_on_users

EC-CouncilCertified Penetration Testing Professional

Domain 6Objective 3

Mastering the Metasploit Framework CPENT Practice Questions (Page 6)

Part of the Advanced Exploitation and IoT domain, which makes up ~17% of our current practice bank.

44questions here

9free pages

12concepts

Questions 26–30

26application · medium
You need to run a series of Metasploit commands automatically every time you start a penetration test against a new client. The commands include setting up the database, creating a workspace, and running an Nmap scan. What is the most efficient way to do this?
Select an answer first
27application · easy
After compromising a Windows domain controller, you need to extract password hashes from the SAM database to attempt offline cracking. Which Meterpreter command or module should you use?
Select an answer first
28foundation · easy
In the Metasploit Framework, which component is responsible for providing the user interface that allows interaction with modules, managing sessions, and executing commands?
Select an answer first
29application · medium
You have a Meterpreter session on a compromised Windows server. You need to enumerate logged-on users, dump password hashes, and then move laterally to another machine on the same subnet. Which Meterpreter commands and modules should you use in order?
Select an answer first
30foundation · easy
Which command in msfconsole is used to execute a resource script?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.

Mastering the Metasploit Framework CPENT Practice Questions (Page 6)

Questions 26–30

You need to run a series of Metasploit commands automatically every time you start a penetration test against a new client. The commands include setting up the database, creating a workspace, and running an Nmap scan. What is the most efficient way to do this?

After compromising a Windows domain controller, you need to extract password hashes from the SAM database to attempt offline cracking. Which Meterpreter command or module should you use?

In the Metasploit Framework, which component is responsible for providing the user interface that allows interaction with modules, managing sessions, and executing commands?

You have a Meterpreter session on a compromised Windows server. You need to enumerate logged-on users, dump password hashes, and then move laterally to another machine on the same subnet. Which Meterpreter commands and modules should you use in order?

Which command in msfconsole is used to execute a resource script?

Keep studying — Advanced Exploitation and IoT