Home › Quizzes › Penetration Testing Tools and Techniques

Penetration Testing Tools and Techniques

This Test contains the basic concept related to Penetration testing and its various techniques. This test is beneficial for academic students as well as for the gate or UGC/NET aspirants.

15 Questions Published
Play Quiz Practise this topic out loud

Questions

Question 1 Multiple Choice (Single Answer)

Which of the following is an incorrect statement about Web Application Firewall (WAF)?

  1. It protects against web-based application attacks.
  2. It identifies the potentially dangerous or malforms attacked towards a given web application.
  3. It uses many bypass techniques for such execution.
  4. It also identifies the malicious worms.
  5. It is a defensive measure implemented into most operating systems and prevents execute permission when an overwrite in the memory has occurred.
Question 2 Multiple Choice (Single Answer)

Which of the following is not included in penetration tests?

  1. Determining the feasibility
  2. Identifying higher-risk vulnerabilities
  3. To identify the impacts of the business attacks
  4. To test the ability of network defenders
  5. To identify the automated system failure
Question 3 Multiple Choice (Single Answer)

Which of the following is not applicable in Web Application Penetration Test?

  1. To identify the number of web applications tested
  2. To check login systems
  3. To check static pages
  4. To check fuzzing
  5. To check wireless networks
Question 4 Multiple Choice (Single Answer)

Which of the following does not come under the Physical Penetration Test?

  1. Locations assessment
  2. Security guards to be bypassed
  3. Entrances into the building
  4. Video cameras
  5. Login systems
Question 5 Multiple Choice (Single Answer)

Which of the following is an incorrect statement about Fuzzing technique?

  1. It is a part of Penetration testing.
  2. It also performs source code analysis.
  3. It identifies the vulnerability from the sent data.
  4. It also identifies a crash in the application.
  5. It is used to create a vulnerability that has not been discovered before.
Question 6 Multiple Choice (Single Answer)

Which of the following is a correct statement about SEH Overwrites exploit during Penetration test?

  1. It occurs due to improper coding techniques.
  2. It occurs due to closing of application by the exception handler.
  3. It is a technique of identifying what type of information is being sent.
  4. It uses data execution prevention (DEP) in its execution.
  5. This exploit is not present during penetration testing.
Question 7 Multiple Choice (Single Answer)

Which of the following is a true statement about Return Oriented Programming in Penetration testing?

  1. This technique uses DEP for the control of execution flow.
  2. It occurs when structured exception handler begins to gracefully close an application.
  3. It occurs due to improper coding techniques.
  4. In this exploit, the attackers goal is to control a crash and gain code execution on the given system.
  5. It is not an exploit during Penetration test.
Question 8 Multiple Choice (Single Answer)

Which of the following is a false statement about Threat modelling approach in penetration testing?

  1. To gather relevant documentation
  2. To encode the method of obfuscating data
  3. Identify and categorize primary and secondary assets
  4. Identify and categorize threats and threat communities
  5. Map threat communities against primary and secondary assets
Question 9 Multiple Choice (Single Answer)

Which of the following is not tested in Network Penetration Test?

  1. Total number of IP addresses
  2. Attempt to gain the highest privileges
  3. Specific compliance requirement
  4. Status of the devices in place that may impact the results of a penetration test
  5. Physical security measures
Question 10 Multiple Choice (Single Answer)

Which of the following is a false statement about 'Human Angle' during Penetration test?

  1. It occurs during a physical penetration test.
  2. It provides the gaining access to the social engineer.
  3. Organisation business information is necessary for such exploit.
  4. It is an attempt to circumvent physical security controls.
  5. It is the part of intelligence gathering phase.
Question 11 Multiple Choice (Single Answer)

Which of the following is a false statement about 'Evasion' technique during the Penetration test?

  1. It is used in order to escape detection during a penetration test.
  2. It uses Intrusion Detection Systems (IDS) or Intrusion Prevention Systems (IPS) to encode the request.
  3. It circumvents web application firewalls.
  4. This technique is necessary for a successful test.
  5. This technique uses a method to inject into an already running process.
Question 12 Multiple Choice (Single Answer)

Which of the following is a false statement about 'Zero-Day Angle' exploit during Penetration testing?

  1. This type of attack often represents a highly advanced organization.
  2. It recreates a protocol or application and attempts to send data at the application.
  3. This attack is possible due to countermeasure technology.
  4. There should be some countermeasures and the relevant operating system to perform such exploit.
  5. Zero-day angle exploit is often a last resort for most penetration testers.
Question 13 Multiple Choice (Single Answer)

Which of the following is called Whitelist Bypass technique?

  1. It is used to prevent the malicious software from being deployed on the system.
  2. It is used to obfuscate data in a way that the deployed piece of code does not appear the same.
  3. It is an attempt to re-arrange data to compress the application or pack it.
  4. It leveraged a trusted model for applications that have been seen on a given system at a time.
  5. It uses encryption methods.
Question 14 Multiple Choice (Single Answer)

Which of the following is an incorrect statement about 'Process Injection' technique during Penetration Testing?

  1. It uses a method to inject the running application.
  2. The information of the application can be hidden within a process.
  3. The running processes can not be inspected easily.
  4. It is implemented into most operating systems and prevents execute permission when an overwrite in memory has occurred.
  5. It is used to hide in a different process that the application would think is a trusted one.
Question 15 Multiple Choice (Single Answer)

Which of the following is a false statement about 'Memory Resident' attack during Penetration test?

  1. This attack is used to prevent the inspect memory.
  2. The attacker checks the memory available to exploit the system.
  3. In this attack, the information of the application can be hidden within a process that would normally be trusted in nature.
  4. This attack is visible during scanning and identification of malicious software in the system.
  5. This attack occurs during writing to disk.
← Back to Quizzes