In the Metasploit framework, what is the role of a 'module'?

A self-contained piece of code that performs a specific action, such as exploiting a vulnerability or running a scan

A network protocol used to communicate with target systems

A database that stores scan results and host information

A command-line interface for interacting with the framework

GIAC Penetration Tester (GPEN)

Domain 2Objective 3

Metasploit GPEN Practice Questions (Page 2)

Part of the Exploitation and Post-Exploitation domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

Questions 6–10

6foundation · easy
Which Metasploit module type is used to perform a port scan on a target without exploiting a vulnerability?
Select an answer first
7application · easy
You are new to Metasploit and need to understand how the framework is organized. You want to find a module that can be used to scan for open SMB shares on a network. Which module type should you look for?
Select an answer first
8foundation · easy
In the Metasploit framework, what is the role of a 'module'?
Select an answer first
9foundation · easy
Which Metasploit module type is specifically designed to help avoid detection by antivirus or intrusion detection systems?
Select an answer first
10foundation · easy
Which Metasploit module type is used to run a scanner or a fuzzer against a target without delivering a payload?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.

Metasploit GPEN Practice Questions (Page 2)

Questions 6–10

Which Metasploit module type is used to perform a port scan on a target without exploiting a vulnerability?

You are new to Metasploit and need to understand how the framework is organized. You want to find a module that can be used to scan for open SMB shares on a network. Which module type should you look for?

In the Metasploit framework, what is the role of a 'module'?

Which Metasploit module type is specifically designed to help avoid detection by antivirus or intrusion detection systems?

Which Metasploit module type is used to run a scanner or a fuzzer against a target without delivering a payload?

Keep studying — Exploitation and Post-Exploitation