Iot And OT Exploitation →hardMultiple SelectObjective-mapped

CPENT Iot And OT Exploitation Practice Question

An IoT firmware analyst is performing emulation of a MIPS-based router firmware binary using Firmadyne. Which TWO of the following steps or components are critical to successfully emulate and analyze the firmware image? (Choose TWO)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Populating a PostgreSQL database with image metadata and utilizing Firmadyne helper scripts to extract the file system

Firmadyne emulation requires extracting the file system, initializing a PostgreSQL database to store image metadata, and running specialized QEMU system emulators with a modified kernel.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Brute-forcing SSH passwords using Hydra against the host machine
Why it's wrong here
Password brute-forcing is an authentication attack, not a firmware emulation step.
✓
Populating a PostgreSQL database with image metadata and utilizing Firmadyne helper scripts to extract the file system
Why this is correct
Firmadyne relies heavily on a PostgreSQL database backend to track image configurations, network interfaces, and extraction results.
✗
Executing an SQL injection payload against the web server running on port 80
Why it's wrong here
SQL injection is a web application vulnerability, not a component of the Firmadyne firmware emulation pipeline.
✗
Sniffing 802.11 wireless beacons with an external USB Wi-Fi adapter in monitor mode
Why it's wrong here
Wireless sniffing is unrelated to emulating a firmware binary image inside QEMU.
✓
Running the emulated kernel image within QEMU system mode (e.g., qemu-system-mips) using a patched initrd
Why this is correct
Firmadyne uses QEMU system emulation combined with customized kernel images and initrd files to emulate full device booting.

About these practice questions

Courseiva writes every CPENT question from scratch — 274 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official EC-Council exam blueprint

Ready to practise?

Turn this into a habit — start a practice session.

Start practice session

Timed practice sets

Short scored sets — answer, get feedback, read the explanation, move on.

CPENT Practice Exam 3 — 20 Questions→CPENT Practice Test 1 — 25 Questions→

Practice by domain

Drill one exam section at a time instead of jumping between unrelated topics.

Iot And OT Exploitation Cloud And Hybrid Infrastructure Security Active Directory Attacks

Practice by question type

Practise one question format at a time: exhibits, multi-select, drag-and-drop, troubleshooting.

Browse scenarios

Topic-level practice

One concept per page — questions, worked explanations, and a short concept guide.

Iot And OT Exploitation practice questions Privilege Escalation Lateral Movement And Post Exploitation practice questions CPENT troubleshooting practice questions

Where to go next

CPENT practice test All EC-Council practice questions All CPENT questions

This CPENT practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CPENT exam.