Welcome to the Exploiting and Pivoting MCQs Page

Dive deep into the fascinating world of Exploiting and Pivoting with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Exploiting and Pivoting, a crucial aspect of CompTIA PenTest+ Certification Exam PT0 002. In this section, you will encounter a diverse range of MCQs that cover various aspects of Exploiting and Pivoting, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within CompTIA PenTest+ Certification Exam PT0 002.

Check out the MCQs below to embark on an enriching journey through Exploiting and Pivoting. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of CompTIA PenTest+ Certification Exam PT0 002.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Exploiting and Pivoting. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Exploiting and Pivoting MCQs | Page 5 of 13

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

01

Penetration Testing

02

Planning and Scoping Penetration Tests 🔒

03

Information Gathering 🔒

04

Vulnerability Scanning 🔒

05

Analyzing Vulnerability Scans

06

Exploiting Network Vulnerabilities 🔒

07

Exploiting Physical and Social Vulnerabilities

08

Exploiting Application Vulnerabilities 🔒

09

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

10

Reporting and Communication

11

Scripting for Penetration Testing 🔒

Q41.

What role does SharpHound play in conjunction with BloodHound?

It visualizes Active Directory objects.

It executes exploits on Active Directory.

It enumerates the AD domain.

It analyzes network traffic.

Discuss

Answer: (c).It enumerates the AD domain. Explanation:SharpHound enumerates the AD domain, and when its data is fed into BloodHound, it facilitates the analysis of Active Directory objects.

Q42.

Why might a penetration tester use BloodHound before using tools like PowerSploit or Empire?

BloodHound is a more powerful tool.

BloodHound provides a useful target list by analyzing Active Directory data.

PowerSploit and Empire are not compatible with BloodHound.

PowerSploit and Empire are standalone tools that don't require analysis.

Discuss

Answer: (b).BloodHound provides a useful target list by analyzing Active Directory data. Explanation:A penetration tester might use BloodHound before using tools like PowerSploit or Empire because BloodHound provides a useful target list by analyzing Active Directory data.

Q43.

What is PsExec, and how is it commonly used in penetration testing?

PsExec is an antivirus tool used to detect exploits.

PsExec is a tool for remote program execution on Windows systems.

PsExec is a Microsoft Sysinternals tool for network traffic analysis.

PsExec is a tool for running programs on Linux systems.

Discuss

Answer: (b).PsExec is a tool for remote program execution on Windows systems. Explanation:PsExec is a tool for remote program execution on Windows systems, and it is commonly used in penetration testing for executing arbitrary commands on remote systems.

Q44.

How can a penetration tester enable remote PowerShell command execution on Windows systems?

Use the PowerShell command enable-RemotePS -allow.

Execute the command enable-RemotePowerShell.

Run the command enable-PSRemoting -force in PowerShell as an administrator.

Set the registry key HKEY_LOCAL_MACHINE\EnableRemotePS to 1.

Discuss

Answer: (c).Run the command enable-PSRemoting -force in PowerShell as an administrator. Explanation:A penetration tester can enable remote PowerShell command execution on Windows systems by running the command enable-PSRemoting -force in PowerShell as an administrator.

Q45.

What setting must be configured if remote systems are not part of the same domain in order to enable PowerShell remoting?

Firewall settings

TrustedHosts setting

DNS resolution

Network discovery

Discuss

Answer: (b).TrustedHosts setting Explanation:If remote systems are not part of the same domain, the TrustedHosts setting must be configured to enable PowerShell remoting.

Q46.

What does WMI stand for, and what capabilities does it offer for penetration testers?

Windows Management Instrumentation; provides access to SNMP only.

Windows Management Interface; allows remote execution of commands.

Windows Memory Interface; supports file transfers.

Windows Monitoring Instrument; allows access to Windows Defender information.

Discuss

Answer: (a).Windows Management Instrumentation; provides access to SNMP only. Explanation:WMI stands for Windows Management Instrumentation, and it offers penetration testers access to a variety of information, ranging from Windows Defender information to SNMP to Application Inventory listings.

Q47.

What is the purpose of fileless malware in penetration testing?

To avoid detection by scanners and antimalware tools.

To increase the speed of malware execution.

To create persistent artifacts on the system.

To generate log entries for forensic analysis.

Discuss

Answer: (a).To avoid detection by scanners and antimalware tools. Explanation:The purpose of fileless malware in penetration testing is to avoid detection by scanners and antimalware tools.

Q48.

What is the concept of "living off the land" in penetration testing?

It refers to the use of fileless malware.

It involves using existing tools on the system without leaving additional files.

It means conducting attacks that are limited to the land-based systems.

It is a term for remote PowerShell command execution.

Discuss

Answer: (b).It involves using existing tools on the system without leaving additional files. Explanation:"Living off the land" in penetration testing refers to using existing tools on the system without leaving additional files.

Q49.

How can a scheduled task be created to run the calculator application once a day at 8:00 a.m. on a Windows system using the command line?

task /create /SC Daily /TN "Calculator" /TR "C:\Windows\System32\calc.exe" /ST 08:00

create /SC Daily /TN "Calculator" /TR "C:\Windows\System32\calc.exe" /ST 08:00

SchTasks /create /SC Daily /TN "Calculator" /TR "C:\Windows\System32\calc.exe" /ST 08:00

SchTask /create /SC Daily /TN "Calculator" /TR "C:\Windows\System32\calc.exe" /ST 08:00

Discuss

Answer: (c).SchTasks /create /SC Daily /TN "Calculator" /TR "C:\Windows\System32\calc.exe" /ST 08:00 Explanation:To schedule a task via the command line on Windows, the correct command is SchTasks /create /SC Daily /TN "Calculator" /TR "C:\Windows\System32\calc.exe" /ST 08:00.

Q50.

How does cron work on Linux or Unix systems for scheduling tasks?

It uses a central configuration file in /etc/crontab for all tasks.

It relies on individual configuration files in /etc/cron.hourly, /etc/cron.daily, etc.

It requires manual execution of scripts at scheduled intervals.

It uses a web-based interface for scheduling tasks.

Discuss

Answer: (b).It relies on individual configuration files in /etc/cron.hourly, /etc/cron.daily, etc. Explanation:On Linux or Unix systems, cron works by relying on individual configuration files in directories such as /etc/cron.hourly, /etc/cron.daily, etc..

Page 5 of 13

Planning and Scoping Penetration Tests 🔒

Information Gathering 🔒

Vulnerability Scanning 🔒

Exploiting Network Vulnerabilities 🔒

Exploiting Application Vulnerabilities 🔒

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

Scripting for Penetration Testing 🔒

Welcome to the Exploiting and Pivoting MCQs Page

Exploiting and Pivoting MCQs | Page 5 of 13

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

Penetration Testing

Analyzing Vulnerability Scans

Exploiting Physical and Social Vulnerabilities

Reporting and Communication

Suggested Topics

HTML

IT Fundamentals

Human Computer Interaction

Management Information Systems

R Programming

MySQL Database

Data Science

Python

Data Structures and Algorithms