NEW
Font size
WorksheetsPost-test Quizz RTBT
Total questions: 20
Worksheet time: 10mins
What is the main purpose of the reconnaissance phase in penetration testing?
Run automated exploits
Plant webshells
Gather target information
Create final reports
Which of the following is an example of passive reconnaissance?
Performing a DNS zone transfer
Running a port scan with Nmap
Viewing the LinkedIn profile of target staff
Performing brute force login SSH
Common tools used for active reconnaissance are...
Maltego
TheHarvester
Nmap
Netcat
What is a webshell in the context of pentesting?
Shell script for backup
Script used for remote access via web server
Tools for SQL injection
Metasploit payload specific to Linux
Which file extension is commonly used for webshells on PHP servers?
.exe
.html
.php
.txt
What distinguishes Red Team from traditional pentesting?
Red Team always uses Metasploit
Red Team is full scope and resembles a real attacker
Red Team does not need a report
Red Team focuses only on one system
What is the function of a reverse shell?
Accessing shell from client to server
Running exploits from the server
Opening a connection from target to attacker
Finding security vulnerabilities
What is required for a reverse shell to successfully connect to the attacker?
Target must be on the same LAN
Attacker's port must be open and listening
Attacker must have a local IP
Target must install Metasploit first
The website exploit-db.com is used for...
Buying paid exploits
Searching for CVEs from official vendors
Public references for exploits and PoCs
Hosting malware
Tools commonly used to listen for reverse shell connections are...
Nikto
Netcat
Sqlmap
Burp Suite
What is the main role of the Blue Team in an organization?
Attacking internal systems
Finding security vulnerabilities in applications
Monitoring and responding to incidents
Creating malware
Which tool is included in SIEM?
Wireshark
Splunk
Procmon
Volatility
The first stage in digital forensic investigation is...
Analysis
Presentation
Collection
Identification
The shimcache artifact is used to view...
Network connections
Kernel activity
Application execution history
File system changes
Tools like PEStudio and Detect It Easy are used for...
Dynamic analysis
Static analysis
Memory dump
File carving
In dynamic analysis, the Procmon tool is used to view...
Network connections
Registry and file activity
Virus definitions
Crontab entries
Where do malware often hide in Linux?
/home/user/
/etc/ssh/
/var/log/
/tmp and /dev/shm
The KAPE tool is used for...
Scanning ports
Performing memory acquisition
Conducting Windows triage
Running VMs
To dump RAM in Linux, the tool used is...
FTK Imager
SleuthKit
LiME
TCPView
The netscan plugin in Volatility is used to...
Find hidden files
View active network connections
View process trees
Dump credentials
