Penetration Testing Intern Interview Questions and Answers

The Cyber Kill Chain is a framework used to describe the stages of a cyber attack, while penetration testing involves simulating these stages to identify vulnerabilities.

• Reconnaissance: Gathering information about the target.

• Weaponization: Creating a payload to exploit vulnerabilities.

• Delivery: Sending the payload to the target.

• Exploitation: Executing the payload to gain access.

• Installation: Establishing a foothold on the target system.

• Command and Control: Maintaining control...read more

The ping command is used to test the reachability of a host on an Internet Protocol (IP) network.

• Ping sends ICMP echo request packets to the target host and waits for a response.

• It measures the round-trip time for packets to reach the host and come back.

• Ping can also be used to determine packet loss and network latency.

• Example: 'ping www.google.com' will send packets to Google's server and display the response times.

The TCP three-way handshake process is a method used to establish a connection between a client and a server in a TCP/IP network.

• Client sends a SYN (synchronize) packet to the server to initiate the connection

• Server responds with a SYN-ACK (synchronize-acknowledge) packet to acknowledge the request

• Client sends an ACK (acknowledge) packet back to the server to confirm the connection establishment