WorksheetsModule 4B. Post-Exploitation - Linux Privilege Escalation
Total questions: 22
Worksheet time: 11mins
Name
Class
Date
1.
What is the main goal of Privilege Escalation
a)
To increase your access and control on the exploited machine
b)
To delete user accounts
c)
To increase system performance
d)
To simplify system administration
2.
What are the two types of privilege escalation?
a)
Vertical and Diagonal
b)
Horizontal and Vertical
c)
Internal and External
d)
Systematic and Random
3.
What are the primary factors that enable privilege escalation?
a)
User negligence and system updates
b)
Strong passwords and firewalls
c)
Vulnerabilities and misconfigurations
d)
Encrypted files and secure networks
4.
How does the sudo command contribute to privilege escalation?
a)
It limits user permissions
b)
It allows running commands with another user's privileges
c)
It tracks user activity
d)
It simplifies system management
5.
What is the purpose of SUID permissions in Linux?
a)
To restrict file access to root only
b)
To delete files securely
c)
To execute a file with the permissions of the file owner
d)
To encrypt file contents
6.
What is a critical aspect of managing file permissions in Linux for security?
a)
Regularly changing file names
b)
Preventing unauthorized user access to files
c)
Increasing the number of file backups
d)
Ensuring files are readable by all users
7.
Why is the /etc/shadow file important in Linux?
a)
It contains encrypted password information for user accounts
b)
It lists all the installed software
c)
It stores the system's network configurations
d)
It logs user activity on the system
8.
What makes world writable files a security risk?
a)
They can be read by anyone
b)
They can be altered by anyone
c)
They cannot be deleted
d)
They are automatically encrypted
9.
How can cronjobs be exploited for privilege escalation?
a)
By deleting all scheduled tasks
b)
By changing the execution time of tasks
c)
By altering scripts executed by cronjobs
d)
By creating new cronjobs
10.
What is a key security concern with cronjobs in Linux?
a)
They consume too much CPU
b)
They are difficult to configure
c)
They run with the privileges of the user who sets them
d)
They can only be created by the root user
11.
What does a cronjob in Linux do?
a)
Manages user passwords
b)
Runs commands and scripts automatically at set intervals
c)
Controls network access
d)
Manages system updates
12.
What can be a consequence of a cronjob executing a script without specifying its path?
a)
It will fail to execute
b)
It only executes system default scripts
c)
It can execute a malicious script of the same name in an accessible directory
d)
It automatically gains root privileges
13.
What is Password Mining in the context of Privilege Escalation?
a)
Changing user passwords regularly
b)
Encrypting passwords
c)
Looking for passwords within the system
d)
Setting strong password policies
14.
What role does the Kernel play in the Linux operating system?
a)
It acts as an interface between hardware and software applications
b)
It is primarily responsible for user authentication
c)
It manages network protocols exclusively
d)
It is an application for system configuration
15.
Which of the following command is used to check the Linux Kernel version?
a)
ls -l
b)
chmod
c)
uname -a
d)
sudo -l
16.
Which of the following command is used to check file permissions?
a)
ls -l
b)
chmod
c)
uname -a
d)
sudo -l
17.
Which of the following command is used to change file permissions?
a)
ls -l
b)
chmod
c)
uname -a
d)
sudo -l
18.
Which of the following command is used to check for especial permissions assigned to your user?
a)
ls -l
b)
chmod
c)
uname -a
d)
sudo -l
19.
Which of the following is NOT a format you can find passwords during password mining?
a)
Plaintext
b)
Hashed
c)
Key files
d)
Authenticated
20.
Where are SSH keys typically stored in Linux systems?
a)
/etc/passwd
b)
/var/ssh
c)
/home/user/.ssh/
d)
/bin/ssh
21.
What permission issue can lead to the exposure of SSH keys?
a)
World executable permissions
b)
World readable permissions
c)
Group write permissions
d)
Owner-only execute permissions
22.
What can an attacker do with a compromised SSH private key?
a)
Decrypt user passwords
b)
Access the user's email
c)
Authenticate as the key's owner to SSH servers
d)
Install malware on the server
100 %
