Cisco
300-215 · Question #58
Refer to the exhibit. What is occurring?
The correct answer is D. The threat actor creates persistence by creating a repeatable task. The schtasks /create command defines a scheduled task (mysc) that runs test.exe at every user logon under the SYSTEM account-an established persistence mechanism.
Submitted by daniela_cl· Mar 6, 2026Forensics Techniques
Question
Refer to the exhibit. What is occurring?
Options
- AObfuscated scripts are getting executed on the victim machine.
- BMalware is modifying the registry keys.
- CRDP is used to move laterally to systems within the victim environment.
- DThe threat actor creates persistence by creating a repeatable task.
How the community answered
(16 responses)- B6% (1)
- C13% (2)
- D81% (13)
Explanation
The schtasks /create command defines a scheduled task (mysc) that runs test.exe at every user logon under the SYSTEM account-an established persistence mechanism.
Topics
#persistence mechanism#scheduled tasks#threat actor techniques#Windows security
Community Discussion
No community discussion yet for this question.