Exploitation Fundamentals GPEN Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A penetration tester is using Metasploit to exploit a Windows server. The tester has a Meterpreter session but needs to pivot to another host on an internal network that is not directly reachable. Which Metasploit feature should be used?

   • AUse the 'portfwd' command to forward a local port to the internal host.
   • BUse the 'route add' command in Meterpreter to add a route to the internal network.
   • CUse the 'auxiliary/scanner/portscan/tcp' module to scan the internal network.
   • DUse the 'exploit/multi/handler' to set up a listener on the compromised host.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   During an internal penetration test, a tester gains code execution on a Linux server inside a segmented network. The server has no outbound internet access, but the tester's attack machine is reachable from the server on TCP port 4444. The tester needs an interactive shell to continue post-exploitation. Which payload should be used?

   • AA generic command shell using the existing web server's CGI interface.
   • BA staged reverse HTTPS payload using port 443 to bypass egress filtering.
   • CA bind shell payload listening on port 4444 on the target server.
   • DA reverse TCP Meterpreter payload connecting back to the attack machine on port 4444.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In Metasploit, what is the role of a 'payload'?

   • AIt is the network connection used to deliver the exploit
   • BIt is the tool used to scan for open ports
   • CIt is the vulnerability that the exploit targets
   • DIt is the code that runs on the target after a successful exploit
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A penetration tester is using Metasploit to exploit a known vulnerability in a Windows service. The tester needs to obtain a Meterpreter session that survives a reboot of the target. Which approach is most appropriate?

   • AUse a bind shell payload and hope the service restarts automatically.
   • BUse a staged payload and manually re-exploit after reboot.
   • CUse a reverse HTTPS payload and rely on the firewall allowing outbound connections.
   • DUse a Meterpreter payload and then run the 'persistence' post-exploitation module.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the key difference between vulnerability assessment and exploitation?

   • AVulnerability assessment is performed by automated tools, while exploitation is always manual
   • BVulnerability assessment is only for external systems, while exploitation is only for internal systems
   • CVulnerability assessment is passive, while exploitation is always active
   • DVulnerability assessment identifies potential weaknesses, while exploitation attempts to leverage them to gain access
   Reveal Solution Discussion Select an answer first