stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Hacking Quiz Part II Flashcards | StudBud
Explore
/
Hacking Quiz Part II
Hacking Quiz Part II
25 terms
·
StudBud Administration
·
13 plays
Quiz for May 7th 2025
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
Which Metasploit module is used to launch a reverse shell attack after successfully exploiting a vulnerability?
Exploit
Payload
Auxiliary
Post-exploitation
2
How does an attacker exploit a poorly implemented RNG in an RSA system?
By predicting the length of the key based on common factors in primes
By forcing the system to output multiple identical encryption results
By guessing the public exponent more easily
By predicting the private key from the weak random prime number generation
3
Which of the following cryptographic algorithms is most susceptible to a collision attack?
AES
SHA-256
MD5
RSA
4
In BeEF, which of the following can be targeted for social engineering attacks via browser exploitation?
Server-side applications
Target's email inbox
Target's router
User's browser session
5
Which Linux command is used to display and change the network configuration of a system?
ipconfig
route
ifconfig
netstat
6
Which method is typically used in brute-force password attacks on encrypted files?
Dictionary attacks
Brute-forcing every possible combination
Guessing common passwords
Side-channel attacks
7
What is the main purpose of performing an 'OS fingerprinting' scan using Nmap?
To find the version of the software running on the target machine
To determine the operating system and version of the target system
To determine the number of connected devices
To scan for open ports on the target
8
Which Metasploit command is used to search for exploits based on a specific vulnerability?
search payload
search exploit
search module
search vuln
9
Technique commonly used for password cracking that tries all combinations of characters until the correct one is found?
Rainbow tables
Brute-force attack
Salting
Dictionary attack
10
In Hashcat, which attack mode would you use for brute-forcing a password from a wordlist against an encrypted file?
Dictionary attack
Mask attack
Rule-based attack
Hybrid attack
11
Attack used to break an RSA encryption if the same plaintext is encrypted with the same public key multiple times?
Chosen ciphertext attack
Common modulus attack
Replay attack
Known plaintext attack
12
What is the role of the '-a' option in Hashcat?
Enable attack logging
Set the hash file location
Specify the attack mode (dictionary, mask, etc.)
Set the output format
13
What is the main security concern with MD5 as a cryptographic hash function?
MD5 is too slow for modern applications
MD5 does not provide adequate entropy
MD5 is susceptible to preimage attacks
MD5 is vulnerable to collisions letting diff inputs yield the same hash
14
What is the main function of the '-O' option in Nmap?
Perform a stealth scan
Perform OS fingerprinting
Scan for vulnerabilities
Scan for open ports
15
What is the primary method attackers use to exploit a vulnerable RNG in cryptographic key generation?
Predicting the key by analyzing the RNG's seed and output
Cryptanalysing the cipher text to reveal weaknesses
Taking advantage of memory leaks during key generation
Brute-force attacks on the encryption algorithm itself
16
What type of cryptographic attack is facilitated by using 'precomputed hash values' to break encryption faster?
Dictionary attack
Collision attack
Rainbow table attack
Brute-force attack
17
In Metasploit, how can you execute a payload on a target machine after successfully exploiting a vulnerability?
Use the 'post-exploitation' module
Use the 'exploit' module
Use the 'scanner' module
Use the 'payload' module
18
In Linux, which command is used to show the current disk usage of your file system?
df
top
du
ls
19
What does the 'dhclient' command do in Linux?
Displays the IP routing table
Assigns a static IP address
Configures the DNS resolver
Provides a DHCP client to obtain an IP address automatically
20
Which type of Nmap scan is considered the most stealthy and difficult to detect?
SYN scan
ACK scan
FIN scan
Xmas scan
21
In Linux, which of the following commands will list the contents of a directory, including hidden files?
ls -l
ls -a
ls -f
ls -h
22
What is the purpose of a 'hash collision' in the context of cryptographic attacks?
Cracking a hashed password faster
Generating two different inputs that result in the same hash value
Encrypting data with the same algorithm in different ways
Using the same hash key for multiple inputs
23
Which of the following commands in Linux would you use to terminate a running process by its PID (Process ID)?
ps
stop
suspend
kill
24
Which attack targets the DNS infrastructure and aims to inject malicious data into a DNS query response?
DNS spoofing
DNS hijacking
DNS poisoning
DNS amplification
25
Which Linux command allows you to check and modify the active routing table?
tracepath
route
ip route
netstat
