You are managing a large penetration test with multiple teams. You need to ensure that all findings are stored in a centralized database and that each team can work in separate workspaces to avoid conflicts. What should you do?

Create a separate workspace for each team and use the 'workspace' command to switch between them.

Use a single workspace for all teams and rely on the database to organize findings.

Use the 'db_export' command to export all findings to a shared file for each team.

Use the 'db_import' command to import all findings into a single database for all teams.

What is the primary purpose of integrating a database with Metasploit?

To automatically generate penetration test reports

To provide a backup of Metasploit configuration files

To store and organize scan results, hosts, and vulnerabilities for easier tracking

To speed up the execution of exploit modules

GIAC Penetration Tester (GPEN)

Domain 2Objective 3

Metasploit GPEN Practice Questions (Page 4)

Part of the Exploitation and Post-Exploitation domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

Questions 16–20

16application · easy
You are automating a series of Metasploit commands for a penetration test. You want to run a resource script that sets up listeners and launches an exploit. Which command should you use to execute the resource script from within msfconsole?
Select an answer first
17foundation · easy
Which type of Metasploit module is used to run commands on a system after a session has been established?
Select an answer first
18expert · hard
You are managing a large penetration test with multiple teams. You need to ensure that all findings are stored in a centralized database and that each team can work in separate workspaces to avoid conflicts. What should you do?
Select an answer first
19foundation · easy
Which command in msfconsole is used to initialize and start the Metasploit database?
Select an answer first
20foundation · easy
What is the primary purpose of integrating a database with Metasploit?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.

Metasploit GPEN Practice Questions (Page 4)

Questions 16–20

You are automating a series of Metasploit commands for a penetration test. You want to run a resource script that sets up listeners and launches an exploit. Which command should you use to execute the resource script from within msfconsole?

Which type of Metasploit module is used to run commands on a system after a session has been established?

You are managing a large penetration test with multiple teams. You need to ensure that all findings are stored in a centralized database and that each team can work in separate workspaces to avoid conflicts. What should you do?

Which command in msfconsole is used to initialize and start the Metasploit database?

What is the primary purpose of integrating a database with Metasploit?

Keep studying — Exploitation and Post-Exploitation