CS6262 - Penetration testing exam with correct answers

CS6262 - Penetration testing exam with |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




correct answers |||\\\




Pentesting Methodology - correct answersFootprinting, Scanning, Enumeration, Gaining Access,
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Escalating Privileges, Pilfering, Covering Tracks, Creating Back Doors
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Footprinting - correct answersRecon and Information gathering; Target IP discovery; Namespace|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




acquisition; Network topology |||\\\ |||\\\




Scanning - correct answersFind target machine, ports, services (versions & configs); ID related
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




vulnerabilities and focus on most promising |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Enumeration - correct answersID valid user accounts or poorly protected resources shares; More |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




intrusive probing than scanning |||\\\ |||\\\ |||\\\




Gaining Access - correct answersID a vulnerability of the target from scannning; Exploit the vuln.
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Escalating privileges - correct answersIf only user-level access was obtained in the last step, seek to
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




gain complete control of the system
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Pilfering - correct answersGather info to allow access of trusted systems
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Covering Tracks - correct answersOnce total ownership of the target is secured, hiding this fact
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




from sysadmins becomes paramount
|||\\\ |||\\\ |||\\\




Creating backdoors - correct answersTrap door will be laid in various parts of the system to ensure
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




that privilege access is easily regained whenever the intruder decides
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Events that trigger a pentest - correct answersAdded or modified infrastructure
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Added or modified applications
|||\\\ |||\\\ |||\\\