A penetration tester is using Metasploit to exploit a known vulnerability in a Linux service. The tester has set the payload to a reverse shell but is unsure if the target can reach the tester's machine due to a firewall. Which Metasploit feature can help the tester determine if the reverse connection is possible?

Use the 'handler' module to listen for the reverse connection and see if it arrives.

Use the 'connect' command to test connectivity to the target.

Use the 'route' command to add a route to the target's network.

Use the 'check' command to verify the exploit's reliability.

Which of the following is a legal boundary that a penetration tester must respect during exploitation?

Avoiding the use of Metasploit because it is considered malicious

Only exploiting systems that are not protected by a firewall

Staying within the scope defined in the testing agreement

Exploiting only vulnerabilities that are publicly disclosed

A penetration tester is behind a strict firewall that blocks all inbound connections to the tester's workstation. The tester needs to obtain a shell from a target that is also behind the same firewall. Which payload type is most likely to succeed?

A staged payload that downloads the second stage from the tester's web server.

Reverse shell payload that makes the target connect back to the tester's workstation.

Bind shell payload that opens a port on the target for the tester to connect to.

A single command payload that executes a command and returns the output via DNS.

GIAC Penetration Tester (GPEN)

Domain 2Objective 1

Exploitation Fundamentals GPEN Practice Questions (Page 3)

Part of the Exploitation and Post-Exploitation domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

7concepts

Questions 11–15

11application · medium
A penetration tester is using Metasploit to exploit a known vulnerability in a Linux service. The tester has set the payload to a reverse shell but is unsure if the target can reach the tester's machine due to a firewall. Which Metasploit feature can help the tester determine if the reverse connection is possible?
Select an answer first
12foundation · easy
Which exploitation technique involves inserting malicious code into a query that is executed by a backend database?
Select an answer first
13foundation · easy
Which of the following is a legal boundary that a penetration tester must respect during exploitation?
Select an answer first
14application · medium
A penetration tester is behind a strict firewall that blocks all inbound connections to the tester's workstation. The tester needs to obtain a shell from a target that is also behind the same firewall. Which payload type is most likely to succeed?
Select an answer first
15foundation · easy
During which phase of the exploitation lifecycle does the tester typically attempt to maintain access and gather additional evidence?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.

Exploitation Fundamentals GPEN Practice Questions (Page 3)

Questions 11–15

Which exploitation technique involves inserting malicious code into a query that is executed by a backend database?

Which of the following is a legal boundary that a penetration tester must respect during exploitation?

A penetration tester is behind a strict firewall that blocks all inbound connections to the tester's workstation. The tester needs to obtain a shell from a target that is also behind the same firewall. Which payload type is most likely to succeed?

During which phase of the exploitation lifecycle does the tester typically attempt to maintain access and gather additional evidence?

Keep studying — Exploitation and Post-Exploitation