stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Pen Testing Game Flashcards | StudBud
Explore
/
Pen Testing Game
Pen Testing Game
17 terms
·
StudBud Administration
·
57 plays
This quiz will inspire you to create your own quiz with word cloud, polls and slides!
Flashcards
17 cards
F
Practice quiz
P
Host live
L
Questions
17
Answers
1
In the context of pen testing, what is the purpose of a "honeypot"?
To generate fake user credentials for testing
To automate web application scans
To detect and monitor unauthorized access attempts
To crack password
2
In a penetration testing engagement, what is the purpose of a "payload"?
To deliver and execute malicious code on the target
To gather information about the target environment
To identify vulnerabilities in the target system
To document the testing process and findings
3
Which of the following best describes a "zero-day vulnerability"?
A vulnerability unknown to the software vendor and has no available patch
A vulnerability that is exploited on the same day it is discovered
A vulnerability that has been publicly disclosed but lacks a patch
A vulnerability that can be exploited without user interaction.
4
if the tester successfully exploits a vulnerability and gains unauthorized access to a system, which phase is underway?
Scanning
Exploitation
Reporting
Enumeration
5
In penetration testing, what does the term "Spear Phishing" refer to?
A technique for finding vulnerable web applications
A method to bypass firewalls
A type of DDoS attack
A highly targeted form of phishing that targets specific individuals/orgs
6
What attack aims to capture sensitive info., such as passwords, by intercepting network traffic between a user & server?
Man-in-the-Middle (MitM)
Cross-Site Scripting (XSS)
Distributed Denial of Service (DDoS) attack
SQL Injection
7
In web app. pen testing, which HTTP status code indicates a successful request with the server returning a resource?
200 OK
500 Internal Server Error
404 Not Found
401 Unauthorized
8
What is the primary objective of conducting a vulnerability assessment?
To exploit vulnerabilities and gain access to systems
To identify and rank vulnerabilities in a system
To test network bandwidth and latency
To generate security policies and procedures
9
In penetration testing, what is the primary objective of "OS fingerprinting"?
To exploit vulnerabilities in the operating system
To determine the version of the operating system on the target system
To compromise network devices
To analyze web application source code
10
21. What does the term "SQL injection" refer to in penetration testing?
A protocol for secure data transmission over the internet
A method for injecting malicious code into system memory
A technique for manipulating SQL commands to exploit vulnerabilities
An attack method to exploit vulnerabilities in SNMP
11
In penetration testing, what is "social engineering"?
A tactic to exploit human psychology to gain unauthorized access or info.
A method for manipulating DNS records
A technique for identifying vulnerabilities in social media accounts
A type of password cracking attack
12
Which phase of the pen testing process involves defining the scope, objectives, rules of engagement?
Execution
Reporting
Planning
Exploitation
13
In penetration testing, what is the primary goal of a "brute force attack"?
To exploit system vulnerabilities
To execute social engineering attacks
To identify weak passwords by trying all possible combinations
To analyze network traffic patterns
14
What is the primary purpose of a buffer overflow attack in penetration testing?
To gain unauthorized access to a system
To manipulate a program's memory and execute malicious code
To exfiltrate sensitive data
To perform a distributed denial of service (DDoS) attack
15
Which of the following statements is true regarding the concept of "privilege escalation" in penetration testing?
Privilege escalation only appears to Windows-based systems
involves gaining higher-level access or privileges than initially granted.
Privilege escalation is a technique for bypassing firewalls.
Privilege escalation only applies to Linux-based systems
16
When conducting a DNS reconnaissance in pen testing, what record type is used to map domain names to IP addresses?
PTR record
A Record
AAAA Record
MX record
17
what is the primary goal when conducting an SQL injection attack?
To crash the database server
To perform a distributed denial of service (DDoS) attack
To extract or modify data in the database
To gain administrative access to the web server
