ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam PT1-002 All Questions

View all questions & answers for the PT1-002 exam
Go to Exam

Exam PT1-002 topic 1 question 97 discussion

Actual exam question from CompTIA's PT1-002
Question #: 97
Topic #: 1
[All PT1-002 Questions]

A penetration tester was able to gain access successfully to a Windows workstation on a mobile client's laptop. Which of the following can be used to ensure the tester is able to maintain access to the system?

  • A. schtasks /create /sc /ONSTART /tr C:\Temp\WindowsUpdate.exe
  • B. wmic startup get caption,command
  • C. crontab ג€"l; echo ג€@reboot sleep 200 && ncat ג€"lvp 4242 ג€"e /bin/bashג€) | crontab 2>/dev/null
  • D. sudo useradd ג€"ou 0 ג€"g 0 user
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Davar39 at Jan. 9, 2022, 11:35 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Davar39
Highly Voted 3 years, 3 months ago
That's wrong, it should be A. B will just list the startup apps and their paths.
upvoted 11 times
...
EZ1656
Highly Voted 3 years, 2 months ago
Selected Answer: A
I think this one should be A
upvoted 10 times
...
MysterClyde
Most Recent 1 year, 10 months ago
The answer is A. The wmic caption commands TELLS you about the running or startup programs but it does not create persistence.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago