CompTIA PenTest+ Practice Questions: Attacks and Exploits Domain

Correct Answer: B

Explanation: The correct answer is B. Fuzzing involves sending malformed or unexpected inputs to a program to discover vulnerabilities. Option A, Port Scanning, involves scanning a network to find open ports, not sending malformed packets. Option C, Social Engineering, involves manipulating people rather than technical testing. Option D, Phishing, involves tricking users into providing sensitive information, not testing network services.

Correct Answer: C

Explanation: A common indication of a successful MitM attack is the interception of sensitive data during transmission. Attackers position themselves between the communicating parties to eavesdrop or alter the communication. Option A is not specific to MitM attacks and could result from various network issues. Option B is more indicative of malware infections. Option D could be a symptom of many issues, such as hardware failures or other types of attacks, but not specifically MitM.

Correct Answer: C

Explanation: Telnet is an outdated protocol that transmits data, including credentials, in plaintext, making it susceptible to exploitation. Option A, HTTPS, and Option B, SSH, are encrypted protocols. Option D, SFTP, is a secure file transfer protocol that uses SSH for encryption.

Correct Answer: B

Explanation: Pivoting involves using a compromised host to relay malicious traffic to a target, masking the original source. Spoofing disguises the origin of traffic. Pharming redirects users to fraudulent sites. Tunneling encapsulates one protocol within another.

Correct Answer: A

Explanation: A Smurf attack involves sending a large number of ICMP Echo Request packets to a target, using the target's IP address as the source IP in the packet headers, causing the target to be overwhelmed by the responses. Option B is incorrect because Ping of Death involves sending malformed packets to crash a system. Option C is incorrect as SYN flood targets the TCP handshake process. Option D is incorrect because a Teardrop attack involves sending fragmented packets that cannot be reassembled properly.

Correct Answer: B

Explanation: A Buffer Overflow attack involves exploiting a vulnerability in a software application to overwrite the memory of an application, which can lead to unauthorized access to system resources or execution of arbitrary code. Privilege Escalation involves gaining higher access rights, Cross-Site Request Forgery (CSRF) tricks users into executing unwanted actions, and Phishing involves tricking users into revealing information.

Correct Answer: B

Explanation: SQL Injection is a code injection technique that exploits vulnerabilities in an application's software by injecting malicious SQL code into input fields that are not properly sanitized. This can allow attackers to manipulate the database, retrieve sensitive information, or even alter database data. Cross-Site Scripting (XSS) involves injecting scripts into web pages, not SQL queries. Cross-Site Request Forgery (CSRF) tricks users into executing unwanted actions on a different site. Buffer Overflow involves overwriting memory to execute arbitrary code.

Correct Answer: A

Explanation: DNS Spoofing, also known as DNS Cache Poisoning, involves redirecting a domain name to a different IP address, potentially leading users to malicious websites. ARP Spoofing involves sending fake ARP messages on a local network, IP Spoofing involves sending IP packets from a false source address, and Email Spoofing involves sending emails with a forged sender address.

Correct Answer: A

Explanation: The correct answer is A. DNS Spoofing involves altering DNS records to redirect traffic from a legitimate site to a malicious one. Option B, Pharming, is similar but generally involves redirecting traffic at a larger scale, often through DNS poisoning. Option C, Phishing, involves tricking users into providing information, not altering DNS records. Option D, ARP Poisoning, involves altering ARP tables to redirect traffic on a local network, not DNS records.

Correct Answer: B

Explanation: Pivoting involves an attacker using a compromised device within a network to launch attacks on other systems inside the network perimeter. Option A, Insider Threat, involves malicious actions by individuals within the organization but not necessarily using compromised devices. Option C, Brute Force Attack, is a method to crack passwords and does not involve network access through compromised devices. Option D, Social Engineering, involves manipulating individuals to gain information or access but not specifically through compromised devices.