EC-Council
312-50V11 · Question #203
312-50V11 Question #203: Real Exam Question with Answer & Explanation
The correct answer is B. Metasploit. Metasploit is the industry-standard open-source exploit framework that provides automated tools for discovering and exploiting vulnerabilities across services, ports, and unpatched systems.
System Hacking
Question
Which of the following is considered an exploit framework and has the ability to perform automated attacks on services, ports, applications an unpatched security flaws in a computer system?
Options
- ANessus
- BMetasploit
- CMaltego
- DWireshark
Explanation
Metasploit is the industry-standard open-source exploit framework that provides automated tools for discovering and exploiting vulnerabilities across services, ports, and unpatched systems.
Common mistakes.
- A. Nessus is a vulnerability scanner that identifies and reports on weaknesses but does not contain exploit modules to actively attack or compromise systems.
- C. Maltego is an OSINT and data-mining tool used for reconnaissance and visualizing relationships between entities, not for executing exploits against systems.
- D. Wireshark is a packet capture and network protocol analyzer used for traffic inspection, and has no capability to launch exploits against target systems.
Concept tested. Exploit framework identification and capabilities
Reference. https://docs.metasploit.com/
Topics
#Metasploit#exploit framework#automated attacks#penetration testing tools
Community Discussion
No community discussion yet for this question.