You have a Meterpreter session on a Windows domain controller. You need to escalate privileges to SYSTEM to dump hashes. The current user is a local administrator. Which command should you try first?

run post/windows/gather/win_privs

What is the purpose of using an encoder in Metasploit?

To encrypt the communication between attacker and target

To compress the payload to reduce its size

To transform a payload to avoid detection by signature-based antivirus or IDS

To increase the reliability of the exploit

GIAC Penetration Tester (GPEN)

Domain 2Objective 3

Metasploit GPEN Practice Questions (Page 1)

Part of the Exploitation and Post-Exploitation domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

Questions 1–5

1expert · medium
You are performing a penetration test and need to identify which Metasploit module type to use for a specific task. You need to scan a network for open ports, verify a vulnerability, and then deliver a payload to a compromised host. Which sequence of module types should you use?
Select an answer first
2foundation · easy
Which Meterpreter command is used to list the running processes on the compromised system?
Select an answer first
3expert · hard
You have a Meterpreter session on a Windows domain controller. You need to escalate privileges to SYSTEM to dump hashes. The current user is a local administrator. Which command should you try first?
Select an answer first
4foundation · easy
What is the purpose of using an encoder in Metasploit?
Select an answer first
5foundation · easy
Which auxiliary module category would you use to verify whether a specific vulnerability exists on a target?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.

Metasploit GPEN Practice Questions (Page 1)

Questions 1–5

You are performing a penetration test and need to identify which Metasploit module type to use for a specific task. You need to scan a network for open ports, verify a vulnerability, and then deliver a payload to a compromised host. Which sequence of module types should you use?

Which Meterpreter command is used to list the running processes on the compromised system?

You have a Meterpreter session on a Windows domain controller. You need to escalate privileges to SYSTEM to dump hashes. The current user is a local administrator. Which command should you try first?

What is the purpose of using an encoder in Metasploit?

Which auxiliary module category would you use to verify whether a specific vulnerability exists on a target?

Keep studying — Exploitation and Post-Exploitation