cybersecurity quiz- pentest quiz- ethical hacking quiz

Created on January 12, 2022 By

admin

simple quiz – (choose the correct answer)

1 / 10

routing

router is a machine connected to a network and is only used to browse the devices connected to that network on the internet

router is a machine connected to different networks at the same time and is capable of forwarding IP datagrams from one network to another

modem is a machine connected to different networks at the same time and is capable of forwarding IP datagrams from one network to another

2 / 10

routing

the routing table is used to connect "Alexa" with the home wifi

routing tables should never be updated

the routing table is used to route packets from one network to another

3 / 10

routing

router has the interfaces

router has no interfaces

the routing tables do not contain information about the interfaces

4 / 10

TCP and UDP

TCP stands for Transmission Control Protocol

TCP stands for Total Control Protocol

TCP stands for Telematic Control Protocol

5 / 10

TCP and UDP

UDP stands for User Data Protocol

UDP stands for Ultimate Data Protocol

UDP stands for User Datagram Protocol

6 / 10

TCP and UDP

TCP is connectionless

UDP is connectionless

UDP is connection-oriented

7 / 10

TCP and UDP

TCP is faster than UDP

UDP is faster than TCP

TCP and UDP are equally fast

8 / 10

HTTP

during an HTTP connection the server sends requests and the client replies with response messages

HTTP (Hypertext Transfer Protocol) is not used under mobile applications

HTTP (Hypertext Transfer Protocol) is the client-server protocol used to transfer web pages

9 / 10

HTTP

in an HTTP request the "User-Agent" field indicates which server side program is making the request

in an HTTP request the "User-Agent" field indicates which client side program is making the response

in an HTTP request the "User-Agent" field indicates which client side program is making the request

10 / 10

HTTP

HTTPS is the "secure" version of HTTP and runs HTTP over SSL/TLS (SSL/TLS is a cryptographic protocol)

HTTPS protects against web application vulnerabilities

HTTPS does not protect against application-level sniffing attacks

Your score is

The average score is 88%

LinkedIn Facebook Twitter VKontakte

Created on January 12, 2022 By

admin

BASE CYBERSECURITY AND PENETRATION TEST QUIZ – (CHOOSE THE CORRECT ANSWER)

1 / 10

NMAP

nmap tool is useful for capturing IP packets

nmap is a password recovery tool

nmap is used to scan and map the network

2 / 10

NMAP

nmap -sU option is for TCP scan

nmap -sn option is for a "ping" scan

nmap -sT option is for "stealth" scan

3 / 10

NMAP

to do an ACK scan with nmap use the -sA option

with nmap it is not possible to specify individual ports to scan

nmap can’t do OS detection

4 / 10

NESSUS

NESSUS is a secure browser

NESSUS is a vulnerability scanner

NESSUS is an antivirus

5 / 10

NESSUS

the NESSUS client configures the scans and the NESSUS server runs them

NESSUS does not have a vulnerability database

NESSUS does not have a free version

6 / 10

SQL Injection

Structured Query Language (SQL) it is used as a firewall

it is not possible to do a SQL Injection using any HTTP Header

"#" or "–" are methods for writing comments on SQL commands

7 / 10

SQL Injection

"sqlmap" is a tool that detects any SQL Injection attacks in real time

"sqlmap" is an important penetration test tool which is used to exploit any vulnerabilities related to SQL Injection

sqlmap "-p" option is useful for specify the port to test

8 / 10

SQL Injection

"- – method POST" is a SQL command

"- – method POST" is a sqlmap option

"- – method POST" is an HTTP VERB

9 / 10

XSS

reflected XSS is when the malicious payload is sent to the server exclusively via the POST method

XSS never creates an alert

XSS and Cross Site Scripting are the same thing

10 / 10

XSS

persistent XSS is when the malicious payload is sent to the vulnerable site and then saved

it is not possible to steal cookies with an XSS attack

filtering user input does not fix the XSS vulnerability

Your score is

The average score is 77%

LinkedIn Facebook Twitter VKontakte

Created on January 12, 2022 By

admin

MEDIUM CYBERSECURITY AND PENETRATION TEST QUIZ – (CHOOSE THE CORRECT ANSWER)

1 / 10

METASPLOIT

"set LHOST 10.98.25.6" is a command for setting victim IP address to Metasploit module

"set RHOST 10.98.25.6" is a command for setting victim IP address to Metasploit module

"set RHOST 10.98.25.6" is a command for setting attacker IP address to Metasploit module

2 / 10

METASPLOIT

"exploit/multi/handler" is a Metasploit module useful to also act as a listener to receive a connection from the victim via a malicious payload

auxiliary Metasploit modules are the same as the exploitation Metasploit modules

"exploit/multi/handler" is an auxiliary Metasploit module

3 / 10

METERPRETER

meterpreter "migrate" command is always required

Meterpreter is a Metasploit auxiliary module

"post/windows/gather/enum_services" is a pillaging ruby script for Meterpreter

4 / 10

METERPRETER

Meterpreter runs only in Windows OS victims

Meterpreter "enum_chrome" script is useful to gather credentials stored in Google Chrome

Meterpreter does not allow privilege escalation

5 / 10

PIVOTING

"socks4a" is a auxiliary Metasploit module which, together with the "proxychains" command, allows you to use the victim machine already exploited as an intermediary to execute commands on other machines connected on other networks otherwise not reachable by our machine

"socks4a" isn’t a proxy server

socks4a’s default port is 1000

6 / 10

PIVOTING

pivoting cannot be done via SSH tunneling

with "post/multi/manage/autoroute" Metasploit module you can avoid using socks4a

the port set on the "socks4a" module must be the same as the one set on the "/etc/proxychains.conf" file

7 / 10

PIVOTING

proxychains command is only for UNIX like OS

"proxychains" goes before the command you want to execute on the victim machine

proxychains cannot go through TOR proxy

8 / 10

BUFFER OVERFLOW

"printf" C++ instruction is not vulnerable to BOF (Buffer Overflow)

IDA is a software used to compile files

"strcpy" C++ instruction is vulnerale to BOF (Buffer Overflow)

9 / 10

BUFFER OVERFLOW

"objdump" does not disassemble executable files

"!mona" tool doesn’t work under Immunity Debugger

EIP points to the next instruction

10 / 10

BUFFER OVERFLOW

EMET helps prevent vulnerabilities using technologies such as DEP, ASLR, SEHOP

ASLR prevent Buffer Overflow blocking an application from executing code in a non-executable area of memory

"Stack Canary" prevent Buffer Overflow introducing random addresses for executables, libraries, and stacks making more difficult predict memory addresses

Your score is

The average score is 66%

LinkedIn Facebook Twitter VKontakte

Created on January 13, 2022 By

admin

ARE YOU VULNERABLE?

1 / 10

ANTIVIRUS

i have an antivirus but I disabled it because it slows down my PC

i don’t have any antivirus

I have an antivirus that is always on

I have an antivirus that is always on and I set it up to run a full scan at least once a week

2 / 10

if I receive an email from my bank with a link on which I have to enter my credentials

I will follow the instructions in this email to the letter

I ignoring it and delete the email

I reply to the email for more information

I’m good enough to rewrite to a sender by sending him my malicious link containing a nice backdoor :-))

3 / 10

What do you use for remote connection with your PC?

I remotely connect to my PC using software that does not encrypt data… I think the password is enough to protect access

I use software that encrypts data but I use an easy password

I use OPENVPN or SSH with a strong password

4 / 10

An SMS arrives on your smartphone saying that the package has been delayed in delivery and that for more information you need to click on a link. What are you doing?

I click on the link because it is not possible to hack a smartphone

I look on the internet for some discussion of people who have had the same problem as me to understand if the SMS is fake

I check the e-commerce site from which I placed the order to understand if the delay in the delivery of the package is true and then I decide whether to click on the link proposed by the SMS or not

I check the e-commerce site from which I placed the order to understand if it is true of the delay in the delivery of the package but in any case I will never click the link proposed by the SMS. Then I delete the SMS

5 / 10

I notice that a site I want to register on is HTTP (not HTTPS). What I do?

I don’t care and I still register using my email and the same password I use for other important things

I sign up using a password that is different from all the others I use for other things but I still communicate all my personal data

if I really want to register because I am interested in this site as credentials I use a new e-mail that does not contain my real name, I use a password that I have never used before and that I will never use again in the future and I do not communicate my real personal data

6 / 10

If I am connected to the free public wi-fi of a hotel and I must necessarily connect to a site with my credentials, what would I do?

Before logging into the site I would connect to a server of a serious VPN service, then, once disconnected from the free public wi-fi, for security reasons I would change the site login password

I would log in to the site anyway then, once disconnected from the free public wi-fi, I would change the site login password

Nothing can happen, the free wi-fi belongs to a serious hotel

7 / 10

Where do I save my many passwords in case I forget them?

I don’t need to save them because I have few passwords and I always reuse those

I save my passwords on the internal hard disk of the pc and/or on a removable external hard disk

I write my passwords on a paper that I keep in my wallet

I save everything on a serious password manager service

8 / 10

Do you save your home banking login credentials on your browser?

Yes, because my browser is safe. I always update it

Yes, because without the device PIN and the SMS code on my smartphone it is not possible to operate with the bank

For the avoidance of doubt, and to prevent any malicious person from seeing my data anyway, I never save the important credentials on my browser

9 / 10

Do you ever update your OS?

No because it is useless. I have antivirus

Yes, often. It is very important to avoid cyber attacks using known vulnerabilities

Yes, but not often, because the latest update could make things even worse

10 / 10

When you are away from your PC for a while but you don’t turn it off, does the screen saver turn on unlockable only with the password?

No because nobody cares about my data

No, I don’t set any passwords (not even when Windows starts) so I shut down the PC every time

Yes and with a strong password (no dates of birth, names, etc …) – uppercase and lowercase letters, numbers, special symbols and at least 8 characters in length

Your score is

The average score is 91%

LinkedIn Facebook Twitter VKontakte

Cookie	Duration	Description
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.