Welcome to the Exploiting Network Vulnerabilities MCQs Page

Dive deep into the fascinating world of Exploiting Network Vulnerabilities with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Exploiting Network Vulnerabilities, a crucial aspect of CompTIA PenTest+ Certification Exam PT0 002. In this section, you will encounter a diverse range of MCQs that cover various aspects of Exploiting Network Vulnerabilities, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within CompTIA PenTest+ Certification Exam PT0 002.

Check out the MCQs below to embark on an enriching journey through Exploiting Network Vulnerabilities. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of CompTIA PenTest+ Certification Exam PT0 002.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Exploiting Network Vulnerabilities. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Exploiting Network Vulnerabilities MCQs | Page 13 of 13

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

01

Penetration Testing

02

Planning and Scoping Penetration Tests 🔒

03

Information Gathering 🔒

04

Vulnerability Scanning 🔒

05

Analyzing Vulnerability Scans

06

Exploiting and Pivoting 🔒

07

Exploiting Physical and Social Vulnerabilities

08

Exploiting Application Vulnerabilities 🔒

09

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

10

Reporting and Communication

11

Scripting for Penetration Testing 🔒

Q121.

During a penetration test, Mike uses double tagging to send traffic to another system. What technique is he attempting?

RFID tagging

Tag nesting

Meta tagging

VLAN hopping

Discuss

Answer: (d).VLAN hopping Explanation:Mike is using nested tags inside a packet to attempt to hop VLANs. If he is successful, his packets will be delivered to the target system, but he will not see any response.

Q122.

Elle is using her workstation as part of an on-path attack as shown in the following image. What does she need to send at point X to ensure that the downgrade attack works properly?

SYN, ACK

PSH, URG

FIN, ACK

SYN, FIN

Discuss

Answer: (c).FIN, ACK Explanation:Sending FIN and ACK while impersonating the target workstation will cause the connection to close. This will cause the target to attempt to establish a less secure connection if supported.

Q123.

Isaac wants to use arpspoof to execute an on-path attack between target host 10.0.1.5 and a server at 10.0.1.25, with a network gateway of 10.0.1.1. What commands does he need to run to do this?

arpspoof -i eth0 -t 10.0.1.5 -r 10.0.1.25

arpspoof -i eth0 -t 10.0.1.25 -r 10.0.1.5

arpspoof -i eth0 -t 255.255.255.255 -r 10.0.1.25

Both a and b

Discuss

Answer: (d).Both a and b Explanation:To fully execute an on-path attack, Isaac needs to spoof both the server and the target so that they each think that his PC is the system they are sending to. Spoofing the gateway (10.0.1.1) or the broadcast address (255.255.255.255) will not serve his purposes.

Q124.

Jessica wants to list the domain password policy for a Windows domain as she prepares for a password attack against domain member systems. What net command can she use to do this?

net view /domainpolicy

net accounts /domain

net /viewpolicy

net domain /admin

Discuss

Answer: (b).net accounts /domain Explanation:The Windows net commands can display a wealth of information about a local domain, and the password policy can be reviewed by using the net accounts /domain command.

Q125.

Cynthia attempted a DNS poisoning attack as shown here. After her attempt, she does not see any traffic from her target system. What most likely happened to cause the attack to fail?

The DNS information was incorrect.

The injection was too slow.

The DNS cache was not refreshed.

The client did not receive a trusted response.

Discuss

Answer: (b).The injection was too slow. Explanation:Cynthia’s response needs to arrive before the legitimate DNS server. If her timing isn’t right, the legitimate response will be accepted.

Q126.

Elle wants to clone an RFID entry access card. Which type of card is most easily cloned using inexpensive cloning devices?

Low-frequency 125 to 134.2 KHz card

Medium-frequency 400 to 451 KHz card

High-frequency 13.56 MHz card

Ultra-high-frequency 865 to 928 MHz card

Discuss

Answer: (a).Low-frequency 125 to 134.2 KHz card Explanation:Low-frequency RFID cards are often used for entry access cards and are easily cloned using inexpensive commodity cloning devices. Medium-frequency cards in the 400 to 451 KHz range do not exist, whereas high-frequency cards are more likely to be cloned using a phone’s NFC capability. Ultra-high-frequency cards are less standardized, making cloning more complex.

Page 13 of 13

Planning and Scoping Penetration Tests 🔒

Information Gathering 🔒

Vulnerability Scanning 🔒

Exploiting and Pivoting 🔒

Exploiting Application Vulnerabilities 🔒

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

Scripting for Penetration Testing 🔒

Welcome to the Exploiting Network Vulnerabilities MCQs Page

Exploiting Network Vulnerabilities MCQs | Page 13 of 13

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

Penetration Testing

Analyzing Vulnerability Scans

Exploiting Physical and Social Vulnerabilities

Reporting and Communication

Suggested Topics

Cloud Computing

JavaScript

Software Architecture and Design

Visual Basic

IT Fundamentals

PHP

MS Office

UNIX

MATLAB