nerdexam
GAQM

CPEH-001 · Question #714

Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397-1872883824- 861252104-501…

The correct answer is B. He must perform privilege escalation. See the full explanation below for the reasoning.

Question

Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397-1872883824- 861252104-501. What needs to happen before Matthew has full administrator access?

Options

  • AHe needs to gain physical access.
  • BHe must perform privilege escalation.
  • CHe already has admin privileges, as shown by the "501" at the end of the SID.
  • DHe needs to disable antivirus protection.

How the community answered

(31 responses)
  • A
    10% (3)
  • B
    74% (23)
  • C
    13% (4)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice