Ethical Hacking: Penetration Testing Methodology Quiz

Quiz: Post-Exploitation

Pass mark: 70%. You can retry as many times as you need.

1 Why does initial access to a system often come with limited privileges? Single answer Because exposed services are usually configured to run with only the privileges they need Because exploitation frameworks are intentionally designed to fail most of the time Because privilege escalation is technically impossible on modern systems

2 Which categories commonly explain privilege escalation opportunities, on Linux, Windows, or both? (several answers) Multiple answers possible Misconfigured permissions on files or scripts run with elevated privileges Outdated system software containing a known, unpatched weakness Exposed credentials in a readable configuration file or script The mere presence of a password-protected login screen

3 Why does this course describe persistence mechanisms only conceptually, as categories, rather than as working techniques? Single answer Because persistence is not a real concern for organisations Because persistence only applies to very old, unsupported operating systems Because providing functional offensive techniques would conflict with the course's ethical and legal boundaries

4 What should a professional report always state clearly regarding persistence during a standard penetration test? Single answer Whether a persistence mechanism was actually deployed or only assessed as theoretically possible The exact commercial price of every tool used during the engagement A guarantee that no persistence mechanism could ever be created on the system

5 Why does much real-world lateral movement rely on legitimate administrative tools rather than new technical weaknesses? Single answer Because legitimate tools are always undetectable by any monitoring system Because legitimate remote administration tools are already present and simply reused with inappropriate access Because lateral movement never actually requires any credentials at all