Question 1

Which command would initiate a YARA rule scan to detect malware signatures and unauthorized access tools on a network file system?

Options :

A : clamscan --database=/path/to/rules --recursive /network/shared/drives/

B : grep -ri 'malware' /network/shared/drives/

C : nmap --script yara.rules -p445 /network/shared/drives/

D : yara -r -p 20 /path/to/rules /network/shared/drives/

Answer: D

Question 2

Which command in Hydra would you use to perform a brute force attack on an FTP server?

Options :

A : hydra ftp 192.168.0.1 -V -f -l admin -p /wordlist.txt

B : hydra -l user -P /path/to/wordlist.txt ftp://192.168.0.1

C : nmap --script ftp-brute --script-args userdb=users.txt,passdb=pass.txt 192.168.0.1

D : brutus -u ftp://192.168.0.1 -U userlist.txt -P passlist.txt

Answer: B

Question 3

Which command would you use to test the ability to move between different network zones?

Options :

A : sudo nmap --packet-trace -p 1-65535 192.168.1.0/24

B : traceroute -T --port=80 192.168.100.1

C : ping 192.168.2.1 -t -l 1400

D : netstat -an | grep ESTABLISHED

Answer: A

Question 4

How would you write a Python script to capture and analyze network packets to detect potential vulnerabilities?

Options :

A : import pcap

B : import scapy.all as scapy

C : import netifaces

D : import socket

Answer: B

Question 5

Which payload would be the most effective to upload when exploiting a vulnerable file upload feature to gain remote command execution on the server?

Options :

A :

B :

C :

D :

Answer: C

Free CPENT Mock Exam – Practice Online Confidently