Mastering the Metasploit Framework CPENT Practice Questions (Page 9)

Questions 41–44

1. 41foundation · easy

   In Metasploit, what is the purpose of a workspace?

   • ATo organize and isolate data such as hosts, services, and vulnerabilities for different projects or engagements.
   • BTo manage user accounts and permissions for the Metasploit console.
   • CTo store payloads and encoders for later use.
   • DTo configure network interfaces for pivoting.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   You have a Meterpreter session on a Windows machine that is in a DMZ. You need to access an internal web server on 192.168.1.10:80 that is not directly reachable from your machine. Which Meterpreter command should you use?

   • Arun post/multi/gather/ping_sweep RHOSTS=192.168.1.0/24
   • Buse auxiliary/server/socks4a; set SRVHOST 127.0.0.1; run
   • Cportfwd add -L 0.0.0.0 -l 8080 -p 80 -r 192.168.1.10
   • Droute add 192.168.1.0 255.255.255.0 <session_id>
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   You are tasked with delivering a Meterpreter payload to a target that has a strict application whitelisting policy. The target only allows specific executables to run. Which technique is most likely to bypass this restriction?

   • AUse a custom executable that is signed with a valid code-signing certificate.
   • BUse a DLL injection technique to load the payload into a whitelisted process.
   • CUse a PowerShell payload that is executed in memory without writing to disk.
   • DUse a staged payload that is delivered in parts to avoid detection.
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   In a Meterpreter session, which command is used to list all running processes on the compromised system?

   • Agetuid
   • Bls
   • Cps
   • Dshell
   Reveal Solution Discussion Select an answer first