Question 1

Which command would initiate a YARA rule scan to detect malware signatures and unauthorized access tools on a network file system?

Options :

A : clamscan --database=/path/to/rules --recursive /network/shared/drives/

B : grep -ri 'malware' /network/shared/drives/

C : nmap --script yara.rules -p445 /network/shared/drives/

D : yara -r -p 20 /path/to/rules /network/shared/drives/

Answer: D

Question 2

You are conducting a penetration test and discover that a web application allows users to upload files without proper validation. How would you exploit this vulnerability to upload a PHP web shell and gain remote control of the server?

Options :

A : Rename a file with multiple extensions such as malware.php.gif, bypassing checks and gaining execution rights.

B : Inject PHP code into a non-executable file, such as a .txt, and trick the server into parsing it as PHP.

C : Use path traversal techniques to place the malicious script in a location where it can be executed.

D : Upload a PHP shell named shell.php.png to bypass the image file restriction, then access the file via the web interface to execute remote code.

Answer: D

Question 3

Which XML payload would you use to exploit an XXE vulnerability to read the /etc/passwd file from a vulnerable server?

Options :

A :

B :

C :

D :

Answer: B

Question 4

You discover an IoT security camera that still uses the default credentials. What type of attack does this susceptibility primarily expose the device to?

Options :

A : brute Force Attack

B : dictionary Attack

C : Phishing Attack

D : credential Stuffing Attack

Answer: D

Question 5

What command would you use to exploit an RCE vulnerability by executing a system shell from a vulnerable PHP web application?

Options :

A : curl -X POST -d "cmd=system('id');" http://vulnerable-site.com/command.php

B : fetch --body-data "run=system('id');" http://vulnerable-site.com/command.php

C : wget --post-data "execute=system('id');" http://vulnerable-site.com/command.php

D : http -f POST http://vulnerable-site.com/command.php cmd="system('id')"

Answer: A

Confidently Practice Online with Free CPENT Exam Cram

Buying Options: