Perimeter Defense Evasion Techniques CPENT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary function of a proxy in the context of perimeter evasion?

   • ATo fragment packets to avoid inspection
   • BTo relay traffic through an intermediary, hiding the tester's origin
   • CTo encrypt all traffic between the tester and the target
   • DTo normalize traffic to match expected patterns
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A firewall is configured to allow only outbound HTTPS traffic. Which application-layer evasion technique could be used to send non-HTTP data through this allowed channel?

   • AUsing DNS queries
   • BUsing ICMP echo requests
   • CUsing FTP over port 443
   • DUsing an HTTP CONNECT proxy
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   Your client's perimeter firewall blocks all inbound traffic except TCP 80 and 443 to a web server. You need to perform a vulnerability scan against an internal host that is not directly accessible. You have compromised the web server and have administrative access. Which technique is most efficient to scan the internal host?

   • AUse the web server as a jump host and run a port scan from it using tools like Nmap.
   • BUse IP spoofing to make the scan appear to come from the web server.
   • CUse HTTP tunneling through the web server to forward scan traffic to the internal host.
   • DUse DNS tunneling to send scan commands to the internal host.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of evasion encoding in the context of IDS/IPS evasion?

   • ATo add redundancy to the payload to ensure reliable delivery
   • BTo encrypt the payload so that only the intended recipient can read it
   • CTo compress the payload to reduce bandwidth usage
   • DTo transform the payload into a form that does not match known attack signatures
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A client wants to test their perimeter defenses. They have a firewall that blocks all inbound traffic except TCP/80 and TCP/443, and an IPS that inspects HTTP traffic. You need to demonstrate a realistic attack that bypasses these controls. Which approach is most effective?

   • ASend a crafted ICMP packet to the firewall to see if it responds.
   • BUse a known CVE in the web application to gain a foothold, then use a reverse tunnel over HTTPS for command and control.
   • CUse a port scanner to identify open ports on the firewall.
   • DTry to connect to the database server directly on port 1433.
   Reveal Solution Discussion Select an answer first