Pentest+ | Practice Test / Quiz / MCQs

Home > CompTIA Security+ Certification > Quizzes > Pentest+

Pentest+

Fast practice, instant feedback. Timer auto-submits when time’s up.

Avg score: 41% • Most missed: “Dynamic Analysis”

Study First Challenge a Friend Stats

Pentest+

Time left 00:00

25 Questions

1. Piggybacking/Tailgating

Rsh created as part of rlogin package in BSD Unix -allowed a user to login and issue commands on another unix computer over a TCP/IC networkwindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidges

2. WinRM

involves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgeswindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientRsh created as part of rlogin package in BSD Unix -allowed a user to login and issue commands on another unix computer over a TCP/IC networkoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO know

3. exploit chaining

4. Rlogin

occurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowwindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgesRsh created as part of rlogin package in BSD Unix -allowed a user to login and issue commands on another unix computer over a TCP/IC network

5. SMB

Server Message Block -transport protocol used by windows machines used for file sharing, printer sharing, access to remote windows services -operates over tcp ports 139 and 445 -SAMBA is linux's implementation of SMBinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgesoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowwindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the client

6. Pass the hash

involves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgeswindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowattack against the NT LAN manager(NTLM)authentication system -attacker steals a hashed user credential and reuses it in the windows authentication system to create a new authentication session

7. REST

Representational State Transfer -web application architectural style based on HTTP -has been replacing SOAP in most web application in recent yearsoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowwindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidges

8. deauthentication (deauth) attack

occurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowDenial-of-service (DoS) strike that disconnects a wireless host from WAP, so that the victim is forced to reconnect to the evil twin. -ex. deauth attack against a legitimate access point to keep it offline so users connect to the evil twininvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgeswindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the client

9. bluejacking

occurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgeswindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientsending unsolicited messages over bluetooth to bluetooth-enabled devices such as mobile phones, PDAs, or laptops

10. usb key drop

windows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowpentester loads up a usb with malware, backdoors, or a keylogger -drop the usb in the parking lot near the organizationinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidges

11. NVD

occurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgeswindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientNational Vulnerability Database -created by NIST, CVE and CVSS supported -'nvd.nist.gov'

12. rainbow tables

windows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgesoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowPre-computed hash values of known usernames and passwords used for offline password file cracking

13. PsExec

involves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgesoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowwindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientlight-weight telnet-replacement that lets you execute processes on other systems with full interactivity for console applications without having to manually install client software

14. compliance scan

occurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgesused to identify vulnerabilities that may affect compliance with regulations or policies -commonly setup as a scanning template in your vulnerability scanner (PCI-DSS)windows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the client

15. SOAP

Simple Object Access Protocol -messaging protocol specification for exchanging structured information in the implementation of web services -SOAP project files are created from WSDL files or a single service callwindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidges

16. kerberoasting

allows any domain user account that has a service principal name (SPN) set can have a service ticket (TGS) -ticket can be requested by any user in the domain and allows for offline cracking of the service account plain text passwordinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgesoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowwindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the client

17. WMI

windows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgeswindows management instrumentation -set of specifications from microsoft for consolidating the management of devices and applications in a network from windows computing systemsoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO know

18. social proof

occurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowwindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientsocial engineering through facebook and twitter can be useful -lots of likes and shares add to social proof -people are more likely to click the linkinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidges

19. relay

occurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowattack occurs when the attacker is able to become the man in the middle and acts as a middle man in a communication sessionwindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidges

20. nmap -sT -A --top-ports=20

tcp port scan on the top 20 portsinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgesoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowwindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the client

21. evil twin

windows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgesoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowrogue access point that appears to be legitimate but is set up to eavesdrop on wireless communication

22. LSASS

local security authority subsystem service -process in windows that enforces the security policy of the system -verifies users when logging on to a computer or server -performs password changes -creates access token (ie, Kerberos)occurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgeswindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the client

23. CAPEC

Common Attack Pattern Enumeration & Classification -'capec.mitre.org' -helps with identifying and understanding attackswindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidges

24. cold boot attack

a side channel attack where an attacker has physical access to the system -user is able to retrieve the encryption keys from a running operating system after using a cold reboot to restart the machineinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidgeswindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO know

25. injection attacks

insertion of additional information or code via an data input from a client to the application -most commonly done as SQL inject, but can also be HTML, command, or code -prevent this through input validation and using least privilege for the databasesoccurs when a pentester follows an authorized individual into a secure location -piggybacking is when the authorized individual does NOT know, tailgating is when they DO knowwindows remote management -allows administrators to remotely run management scripts using the WS-management protocol (based on SOAP) -windows remote management is run on the server -windows remote shell(WinRS) is run on the clientinvolves layering exploits in a series -ex. 1 bypass firewall 2 gain access to user system 3 escalate privlidges

⚡ Recently practiced quizzes in this topic

Live quiz activity

Cybersecurity Assessment Test Physical Security CompTIA Cybersecurity Analyst Plus CySA+ CS0-001 Questions CompTIA Security+ Certification Exam CompTIA Security+ SY0-601 Certification Exam Terms To Know Hardening CySA+ (CS0-002) Review Questions Virtualization (And Security) Overview of Security Secure Software Development

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know? Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com