Common Approach of a Hacker CT-STE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which phase of the attack lifecycle involves removing evidence of the intrusion?

   • AReconnaissance
   • BCovering Tracks
   • CMaintaining Access
   • DGaining Access
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the correct order of the attack lifecycle phases?

   • ACovering Tracks, Reconnaissance, Scanning, Gaining Access, Maintaining Access
   • BReconnaissance, Scanning, Gaining Access, Maintaining Access, Covering Tracks
   • CGaining Access, Reconnaissance, Scanning, Maintaining Access, Covering Tracks
   • DScanning, Reconnaissance, Gaining Access, Covering Tracks, Maintaining Access
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   After compromising a Windows server, an attacker clears the event logs and disables the auditing policy. What is the attacker's primary objective?

   • ATo cover tracks and avoid detection
   • BTo maintain persistent access
   • CTo scan for additional vulnerabilities
   • DTo escalate privileges to administrator level
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A penetration tester is hired to assess the external attack surface of a company. The tester begins by browsing the company's public website, reading job postings, and reviewing social media profiles of employees. The tester does not interact directly with the company's systems. Which phase of the attack lifecycle is the tester performing, and what is the primary goal?

   • AExploitation to gain initial access
   • BActive scanning to identify open ports and services
   • CPassive reconnaissance to gather information without alerting the target
   • DEnumeration to extract user accounts and network shares
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of establishing persistence on a compromised system?

   • ATo ensure continued access even after the initial vulnerability is patched
   • BTo gather information about the target during the reconnaissance phase
   • CTo exploit a vulnerability to gain initial access
   • DTo remove evidence of the intrusion from the system
   Reveal Solution Discussion Select an answer first