What is a Metasploit resource script?

A payload that runs on the target system

A script that exploits a vulnerability without user interaction

A file containing a sequence of msfconsole commands that can be executed automatically

A module that gathers information from the target

You need to generate a payload that can evade antivirus detection on a Windows target. You have decided to use msfvenom. Which command line option should you use to specify an encoder?

-p windows/meterpreter/reverse_tcp

GIAC Penetration Tester (GPEN)

Domain 2Objective 3

Metasploit GPEN Practice Questions (Page 5)

Part of the Exploitation and Post-Exploitation domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

Questions 21–25

21foundation · easy
What is a Metasploit resource script?
Select an answer first
22foundation · easy
Which Metasploit command is used to execute the currently selected exploit module?
Select an answer first
23application · easy
You need to generate a payload that can evade antivirus detection on a Windows target. You have decided to use msfvenom. Which command line option should you use to specify an encoder?
Select an answer first
24application · medium
You need to run a series of Metasploit commands automatically every time you start msfconsole for a recurring assessment. Which file should you create or modify to achieve this?
Select an answer first
25foundation · easy
Which Meterpreter command is used to display the current working directory on the compromised system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.

Metasploit GPEN Practice Questions (Page 5)

Questions 21–25

What is a Metasploit resource script?

Which Metasploit command is used to execute the currently selected exploit module?

You need to generate a payload that can evade antivirus detection on a Windows target. You have decided to use msfvenom. Which command line option should you use to specify an encoder?

You need to run a series of Metasploit commands automatically every time you start msfconsole for a recurring assessment. Which file should you create or modify to achieve this?

Which Meterpreter command is used to display the current working directory on the compromised system?

Keep studying — Exploitation and Post-Exploitation