What is the main purpose of the reconnaissance phase in penetration testing?

• Run automated exploits

• Plant webshells

• Gather target information

• Create final reports

Which of the following is an example of passive reconnaissance?

• Performing a DNS zone transfer

• Running a port scan with Nmap

• Viewing the LinkedIn profile of target staff

• Performing brute force login SSH

Common tools used for active reconnaissance are...

• Maltego

• TheHarvester

• Nmap

• Netcat

What is a webshell in the context of pentesting?

• Shell script for backup

• Script used for remote access via web server

• Tools for SQL injection

• Metasploit payload specific to Linux

Which file extension is commonly used for webshells on PHP servers?

• .exe

• .html

• .php

• .txt

What distinguishes Red Team from traditional pentesting?

• Red Team always uses Metasploit

• Red Team is full scope and resembles a real attacker

• Red Team does not need a report

• Red Team focuses only on one system

What is the function of a reverse shell?

• Accessing shell from client to server

• Running exploits from the server

• Opening a connection from target to attacker

• Finding security vulnerabilities

What is required for a reverse shell to successfully connect to the attacker?

• Target must be on the same LAN

• Attacker's port must be open and listening

• Attacker must have a local IP

• Target must install Metasploit first

The website exploit-db.com is used for...

• Buying paid exploits

• Searching for CVEs from official vendors

• Public references for exploits and PoCs

• Hosting malware

Tools commonly used to listen for reverse shell connections are...

• Nikto

• Netcat

• Sqlmap

• Burp Suite