Common Approach of a Hacker CT-STE Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A penetration tester is performing an external assessment. The tester has gathered information from public sources and now wants to identify open ports and services on the target's firewall. However, the tester is concerned about being detected by the target's intrusion detection system (IDS). Which approach is most likely to minimize the risk of detection while still gathering the needed information?

   • APerform a full TCP connect scan on all 65535 ports
   • BPerform the scan from a single IP address to avoid detection
   • CUse a slow, randomized port scan with a low packet rate
   • DUse a SYN scan, which is less likely to be logged by the target
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security team is analyzing a series of attacks against their organization. They notice that the attacker spent weeks mapping the network and identifying high-value targets before launching a targeted phishing campaign. Which aspect of the hacker mindset does this behavior best illustrate?

   • ADesire for technical challenge
   • BMethodical and goal-oriented approach
   • COpportunistic and impulsive behavior
   • DReckless disregard for detection
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following best describes a common motivation for a hacker when targeting a system?

   • ATo improve the system's security by reporting all discovered vulnerabilities
   • BTo ensure the system remains available for all authorized users
   • CTo demonstrate technical skill and gain recognition within a community
   • DTo comply with organizational security policies and procedures
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the main goal of covering tracks?

   • ATo exploit a vulnerability to gain access
   • BTo establish a backdoor for future access
   • CTo avoid detection and maintain the ability to use the compromised system
   • DTo gather information about the target's network
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An attacker exploits a vulnerability in a web server and gains a shell. To ensure they can return even if the vulnerability is patched, the attacker creates a new user account with administrative privileges and schedules a task to run a script that connects back to their server daily. Which phase of the attack lifecycle is the attacker performing?

   • AGaining access
   • BCovering tracks
   • CScanning and enumeration
   • DMaintaining access
   Reveal Solution Discussion Select an answer first