Welcome to the Attacking Hosts,Cloud Technologies and Specialized Systems MCQs Page

Dive deep into the fascinating world of Attacking Hosts,Cloud Technologies and Specialized Systems with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Attacking Hosts,Cloud Technologies and Specialized Systems, a crucial aspect of CompTIA PenTest+ Certification Exam PT0 002. In this section, you will encounter a diverse range of MCQs that cover various aspects of Attacking Hosts,Cloud Technologies and Specialized Systems, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within CompTIA PenTest+ Certification Exam PT0 002.

Check out the MCQs below to embark on an enriching journey through Attacking Hosts,Cloud Technologies and Specialized Systems. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of CompTIA PenTest+ Certification Exam PT0 002.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Attacking Hosts,Cloud Technologies and Specialized Systems. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Attacking Hosts,Cloud Technologies and Specialized Systems MCQs | Page 3 of 18

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

01

Penetration Testing

02

Planning and Scoping Penetration Tests 🔒

03

Information Gathering 🔒

04

Vulnerability Scanning 🔒

05

Analyzing Vulnerability Scans

06

Exploiting and Pivoting 🔒

07

Exploiting Network Vulnerabilities 🔒

08

Exploiting Physical and Social Vulnerabilities

09

Exploiting Application Vulnerabilities 🔒

10

Reporting and Communication

11

Scripting for Penetration Testing 🔒

Q21.

How does the CVE list classify Linux kernel exploits?

Based on the severity of the exploit

Based on the affected peripherals

Based on the type of vulnerability

Based on the kernel version

Discuss

Answer: (c).Based on the type of vulnerability Explanation:The CVE list classifies Linux kernel exploits based on the type of vulnerability, including categories such as denial-of-service, code execution, overflow, memory corruption, and privilege escalation.

Q22.

Which type of Linux kernel exploits is most likely to be useful to penetration testers?

Denial-of-service

Code execution

Memory corruption

Directory traversal

Discuss

Answer: (b).Code execution Explanation:Code execution, privilege elevation, and bypass attacks are most likely to be useful to penetration testers among Linux kernel exploits.

Q23.

What is a common opportunity for penetration testers regarding Linux kernel patches?

Immediate application of patches

Delayed application of patches

Automatic patching by the system

Patching without system reboot

Discuss

Answer: (b).Delayed application of patches Explanation:Many administrators may delay kernel patches, providing an opportunity for penetration testers who can gain access to a system, as kernel exploits may not be promptly patched.

Q24.

How can penetration testers quickly check a Linux system for potential kernel issues?

Using the lsb_release -a command

Using the uname -a command

Using the ps command

Using the cat /etc/kernel-release command

Discuss

Answer: (b).Using the uname -a command Explanation:Penetration testers can quickly check a Linux system for potential kernel issues by using the uname -a command to determine the kernel version.

Q25.

Why is it essential for penetration testers to know common attack and exploit techniques for Windows systems?

Windows systems are more secure than Linux systems

Windows systems are less common in corporate environments

Windows systems are immune to penetration testing

Windows systems are widely used in corporate workstations and servers

Discuss

Answer: (d).Windows systems are widely used in corporate workstations and servers Explanation:Windows systems are widely used in corporate workstations and servers, making it essential for penetration testers to know common attack and exploit techniques for these systems.

Q26.

What is a common method for harvesting credentials from Windows systems?

Using Metasploit for all scenarios

Targeting specific vulnerabilities

Obtaining NTLM hashes with tools like Mimikatz

Cracking Windows passwords using brute force

Discuss

Answer: (c).Obtaining NTLM hashes with tools like Mimikatz Explanation:Penetration testers should be familiar with obtaining NTLM hashes from Windows systems using tools like Mimikatz.

Q27.

What type of authentication hashes does Windows frequently rely on for authentication purposes?

MD5 hashes

SHA-256 hashes

NT LAN Manager (NTLM) password hashes

bcrypt hashes

Discuss

Answer: (c).NT LAN Manager (NTLM) password hashes Explanation:Windows frequently relies on NT LAN Manager (NTLM) password hashes for authentication purposes.

Q28.

What is a characteristic of NTLM hashes used in Windows for authentication?

They are salted

They are hashed with SHA-256

They are case-sensitive

They are unsalted

Discuss

Answer: (d).They are unsalted Explanation:NTLM hashes used in Windows for authentication are unsalted.

Q29.

How do pass-the-hash attacks work in the context of Windows systems?

By injecting viruses into LSASS

By injecting hashes into LSASS or presenting them to services

By exploiting buffer overflows in LSASS

By exploiting kernel vulnerabilities

Discuss

Answer: (b).By injecting hashes into LSASS or presenting them to services Explanation:Pass-the-hash attacks work by injecting hashes into LSASS or presenting them to services like SMB or WMI.

Q30.

What Registry location contains the password of the logged-in user in an encrypted form on Windows systems?

HKEY_LOCAL_MACHINE/Security/Policy/Secrets

HKEY_LOCAL_MACHINE/System/Passwords

HKEY_CURRENT_USER/Software/Encryption/LSA

HKEY_USERS/Security/Passwords

Discuss

Answer: (a).HKEY_LOCAL_MACHINE/Security/Policy/Secrets Explanation:The LSA secrets Registry location, HKEY_LOCAL_MACHINE/Security/Policy/Secrets, contains the password of the logged-in user in an encrypted form on Windows systems.

Page 3 of 18

Planning and Scoping Penetration Tests 🔒

Information Gathering 🔒

Vulnerability Scanning 🔒

Exploiting and Pivoting 🔒

Exploiting Network Vulnerabilities 🔒

Exploiting Application Vulnerabilities 🔒

Scripting for Penetration Testing 🔒

Welcome to the Attacking Hosts,Cloud Technologies and Specialized Systems MCQs Page

Attacking Hosts,Cloud Technologies and Specialized Systems MCQs | Page 3 of 18

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

Penetration Testing

Analyzing Vulnerability Scans

Exploiting Physical and Social Vulnerabilities

Reporting and Communication

Suggested Topics

Software Architecture and Design

DBMS

Artificial Intelligence

Object Oriented Programming

HTML

Web Technologies

Internet of Things (IoT)

Computer Hardware

Computer Graphics