Perimeter Defense Evasion Techniques CPENT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why is it important to validate evasion techniques in a controlled environment before using them in a live penetration test?

   • ATo reduce the time required for the live penetration test
   • BTo guarantee that the techniques will not be detected by the target's defenses
   • CTo avoid the need for legal authorization in the live test
   • DTo ensure the techniques do not cause unintended damage to the target systems
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which technique allows a penetration tester to route traffic through an encrypted SSH connection to bypass perimeter controls?

   • AEvasion encoding
   • BIP spoofing
   • CSSH tunneling
   • DFragmentation
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   You are on a guest Wi-Fi network that restricts outbound traffic to HTTP and HTTPS only. You need to access an internal server on the corporate network using RDP (TCP 3389). You have credentials for a jump host on the corporate network that is reachable via HTTPS. Which technique should you use?

   • AUse SSH tunneling through the jump host, with SSH configured to listen on TCP 443.
   • BUse an HTTP proxy on the jump host to forward RDP traffic.
   • CUse a VPN connection to the corporate network.
   • DUse DNS tunneling to encapsulate RDP traffic.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   You are performing a red team exercise. The target network has an IDS that uses both signature-based and anomaly-based detection. You need to deliver a payload that is not detected by either. Which technique is most likely to succeed?

   • AUse a payload that mimics normal application behavior, such as a legitimate API call, and deliver it over HTTPS.
   • BUse a custom payload that is encrypted and delivered over HTTPS, but the IDS has TLS decryption.
   • CUse a well-known exploit that has been patched, but the target is vulnerable.
   • DUse a polymorphic payload that changes its signature each time, but the IDS uses behavioral detection.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   You are on an internal network and need to access a web server on the internet that is blocked by the corporate proxy. The proxy allows CONNECT only to TCP 443. You have access to an external server that you control. Which method will allow you to browse the blocked website?

   • ASet up an SSH dynamic SOCKS proxy on your external server and configure your browser to use it via a local port.
   • BUse DNS tunneling to resolve the blocked website's content.
   • CUse an HTTP proxy on your external server and configure your browser to use it.
   • DUse a VPN connection to your external server.
   Reveal Solution Discussion Select an answer first