Welcome to the Exploiting and Pivoting MCQs Page

Dive deep into the fascinating world of Exploiting and Pivoting with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Exploiting and Pivoting, a crucial aspect of CompTIA PenTest+ Certification Exam PT0 002. In this section, you will encounter a diverse range of MCQs that cover various aspects of Exploiting and Pivoting, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within CompTIA PenTest+ Certification Exam PT0 002.

Check out the MCQs below to embark on an enriching journey through Exploiting and Pivoting. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of CompTIA PenTest+ Certification Exam PT0 002.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Exploiting and Pivoting. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Exploiting and Pivoting MCQs | Page 6 of 13

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

01

Penetration Testing

02

Planning and Scoping Penetration Tests 🔒

03

Information Gathering 🔒

04

Vulnerability Scanning 🔒

05

Analyzing Vulnerability Scans

06

Exploiting Network Vulnerabilities 🔒

07

Exploiting Physical and Social Vulnerabilities

08

Exploiting Application Vulnerabilities 🔒

09

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

10

Reporting and Communication

11

Scripting for Penetration Testing 🔒

Q51.

What is the purpose of using a "call home" script in scheduled tasks?

To execute a script that performs harmless actions on the compromised system.

To schedule tasks that run only during the daytime.

To retain access to systems by initiating connections to a controlled system on a regular basis.

To automate the removal of malware from the compromised system.

Discuss

Answer: (c).To retain access to systems by initiating connections to a controlled system on a regular basis. Explanation:The purpose of using a "call home" script in scheduled tasks is to retain access to systems by initiating connections to a controlled system on a regular basis.

Q52.

What is the primary function of Responder in the context of SMB services?

To scan for open shares and services.

To brute-force logins for SMB.

To reply to queries for resources and capture hashed credentials.

To gather information about SMB implementations.

Discuss

Answer: (c).To reply to queries for resources and capture hashed credentials. Explanation:In the context of SMB services, the primary function of Responder is to reply to queries for resources and capture hashed credentials.

Q53.

What protocol is used by SMB for file-sharing, authentication, authorization, and print services?

HTTP

FTP

SMTP

SMB

Discuss

Answer: (d).SMB Explanation:SMB (Server Message Block) is used for file-sharing, authentication, authorization, and print services.

Q54.

What is the primary purpose of SecureAuth’s Impacket toolset?

Registry manipulation on Windows systems

Creating WMI persistence on remote machines

Lightweight packet sniffing using raw sockets

Capturing active hashes from authenticated sessions

Discuss

Answer: (b).Creating WMI persistence on remote machines Explanation:The primary purpose of SecureAuth’s Impacket toolset includes creating WMI persistence on remote machines.

Q55.

Which Impacket tool replicates the functionality of PsExec in Python?

wmiexec.py

smbclient.py

sniff.py

reg.py

Discuss

Answer: (a).wmiexec.py Explanation:The Impacket tool that replicates the functionality of PsExec in Python is wmiexec.py.

Q56.

What is the objective of pass-the-hash attacks in penetration testing?

To capture active hashes from authenticated sessions

To add arbitrary hosts to a system’s hosts files

To perform on-path attacks by changing DNS configurations

To replicate the functionality of PsExec

Discuss

Answer: (a).To capture active hashes from authenticated sessions Explanation:The objective of pass-the-hash attacks in penetration testing is to capture active hashes from authenticated sessions, allowing the attacker to impersonate the user.

Q57.

How can mitm6 be used in a DNS attack?

By adding arbitrary hosts to a system's hosts files

By performing on-path attacks with link-local IPv6 addresses

By responding to DHCPv6 messages and directing traffic to chosen destinations

By replicating the functionality of PsExec

Discuss

Answer: (c).By responding to DHCPv6 messages and directing traffic to chosen destinations Explanation:mitm6 can be used in a DNS attack by responding to DHCPv6 messages and giving them a link-local IPv6 address paired with a system controlled by the attacker as the default DNS server, allowing on-path attacks by directing targets to arbitrary destinations.

Q58.

What does LSASS.exe stand for in the context of pass-the-hash attacks?

Local Security Assessment and System Service

Local Service Authentication and Security Subsystem

Local Security Authority Subsystem Service

Local System Authentication and Security Service

Discuss

Answer: (c).Local Security Authority Subsystem Service Explanation:LSASS.exe stands for Local Security Authority Subsystem Service in the context of pass-the-hash attacks.

Q59.

Which port is commonly associated with Windows Remote Desktop Protocol (RDP)?

3389

443

Discuss

Answer: (c).3389 Explanation:Windows Remote Desktop Protocol (RDP) is commonly associated with port 3389.

Q60.

In the context of Apple's Remote Desktop (ARD), how do penetration testers often use ARD?

By exploiting known vulnerabilities in modern Macs

By using it as a remote access method for compromised macOS systems

By delivering VNC payloads

By targeting the Screen Sharing or Remote Management modes

Discuss

Answer: (b).By using it as a remote access method for compromised macOS systems Explanation:Penetration testers often use Apple's Remote Desktop (ARD) as a remote access method for compromised macOS systems.

Page 6 of 13

Planning and Scoping Penetration Tests 🔒

Information Gathering 🔒

Vulnerability Scanning 🔒

Exploiting Network Vulnerabilities 🔒

Exploiting Application Vulnerabilities 🔒

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

Scripting for Penetration Testing 🔒

Welcome to the Exploiting and Pivoting MCQs Page

Exploiting and Pivoting MCQs | Page 6 of 13

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

Penetration Testing

Analyzing Vulnerability Scans

Exploiting Physical and Social Vulnerabilities

Reporting and Communication

Suggested Topics

MS Office

C# programming

MongoDB

Internet of Things (IoT)

JavaScript

Management Information Systems

PHP

CompTIA PenTest+ Certification Exam PT0 002

Object Oriented Programming