MENU
What would a penetration tester expect to access after the following metasploit payload is delivered successfully?
Set PAYLOAD windows / shell / reverse _ tcp
Suggested Answer: A
Get Premium GCED Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
A company needs to classify its information as a key step in valuing it and knowing where to focus its protection.
Rotation of duties and separation of duties are both key elements in reducing the scope of information access and the ability to conceal malicious behavior.
Separation of duties helps minimize ''empire building'' within a company, keeping one individual from controlling a great deal of information, reducing the insider threat.
Security awareness programs can help other employees notice the signs of an insider attack and thus reduce the insider threat.
Detection is a reactive method and only occurs after an attack occurs. Only preventative methods can stop or limit an attack.
35 comments · newest first
PA
Paris
10 months ago
Wait, can you really expect that from this payload?
EL
Elliot
11 months ago
100% agree, it's a command prompt!
HO
Hollis
11 months ago
A netcat listener? Not sure about that one.
VO
Vonda
11 months ago
I thought it would be a meterpreter prompt?
BE
Benedict
11 months ago
Definitely a command prompt on the target.
AB
Abel
11 months ago
I feel like I’ve seen a question like this before, and it was definitely about getting a meterpreter session, but I can't recall the specifics.
SO
Solange
12 months ago
I’m a bit confused; I thought reverse TCP was more about establishing a shell, so maybe it’s the command prompt option?
GL
Glennis
12 months ago
I remember practicing with Metasploit, and I feel like the meterpreter prompt is what we usually get, but this one seems different.
CH
Chun
12 months ago
I think the reverse TCP payload is supposed to give us a command prompt on the target, but I'm not entirely sure.
JA
Jacklyn
1 year ago
The key here is to pay attention to the specific payload being used. A reverse TCP shell should give you a command prompt on the target, so I'm going to go with that option.
JU
Julio
1 year ago
Wait, is it a meterpreter prompt? I'm a little confused about the different types of payloads and what they give you access to. I'll have to review my notes on this.
MA
Malika
1 year ago
Hmm, I'm not too sure about this. The Metasploit commands can get a bit tricky sometimes. I'll have to think this through carefully.
AL
Alpha
1 year ago
This looks like a pretty straightforward Metasploit question. I'm pretty confident I can handle this one.
JO
Joye
1 year ago
Okay, let's see. The payload is set to "windows/shell/reverse_tcp", so I'm guessing we're looking for a command prompt on the target system. I think I've got this.
AL
Alisha
1 year ago
I'm a bit confused by the specifics of this setup. I'll need to review my networking notes to make sure I understand the requirements.
DE
Devora
1 year ago
Not so fast. While end-users are important, I don't think they're the only stakeholders involved. Budget holders and other internal stakeholders likely play a role as well.
JA
Jackie
1 year ago
I'm a little confused by the options. Is B correct, using the pipe to send messages to both the log file and the virtual console? Or is that not the right approach? I'll have to review my syslog notes to be sure.
JU
Julian
1 year ago
Wait, is this a trick question? I bet the correct answer is actually a surprise zombie apocalypse scenario. Better stock up on canned goods just in case.
AR
Art
1 year ago
VNC server session? Are you kidding me? I'm gonna get that sweet, sweet meterpreter shell, baby!
FA
Farrah
1 year ago
I agree, meterpreter is much more powerful than VNC server session.
AR
Arlette
1 year ago
Yeah, meterpreter is definitely the best option for a penetration tester.
EV
Evangelina
1 year ago
I'm with you on that one! Meterpreter is the way to go.
KE
Kerrie
1 year ago
Haha, netcat listener? What is this, the 90s? C'mon, we all know it's meterpreter all the way!
MA
Malinda
1 year ago
Agreed, meterpreter is the go-to for penetration testers.
AL
Alaine
1 year ago
Definitely, meterpreter gives you so much more control.
KI
Kimberely
1 year ago
Yeah, netcat is old school. Meterpreter is the way to go.
KI
Kizzy
1 year ago
I'm going with D. A good old command prompt is all I need to wreak havoc on that target.
AL
Alaine
1 year ago
A meterpreter prompt? That's the obvious choice, isn't it? Metasploit all the way!
DE
Derrick
1 year ago
It's the best way to maintain access and control over the target system.
KR
Kristal
1 year ago
I always go for meterpreter when I deliver a payload successfully.
CA
Carma
1 year ago
Agreed, with meterpreter you can do so much more than just a command prompt.
AN
Andree
1 year ago
Yes, definitely a meterpreter prompt. It's the most powerful tool in Metasploit.
ST
Stevie
1 year ago
I believe the correct answer is C) A meterpreter prompt on the target, as it allows for more control and flexibility during the assessment.
AH
Ahmed
2 years ago
I agree with Cletus, because meterpreter provides more advanced features for post-exploitation tasks.
CL
Cletus
2 years ago
I think a penetration tester would expect to access a meterpreter prompt on the target.