GIAC
GCIH · Question #395
GCIH Question #395: Real Exam Question with Answer & Explanation
Sign in or unlock GCIH to reveal the answer and full explanation for question #395. The question stem and answer options stay visible for context.
Vulnerability Exploitation & Privilege Escalation
Question
You just acquired admin rights on a remote machine and gained remote access. What techniques would you use to determine if it is a virtual machine?
Options
- ALook at the system's firewall settings, running services, IO settings, and disk activity
- BLook at the system's processor utilization, network card settings, open ports, and logged on users
- CLook at the system's registry, its memory, its hardware, and its processor instructions
- DLook at the system's OS version, patch status, network card activity, and hardware drivers
Unlock GCIH to see the answer
You've previewed enough free GCIH questions. Unlock GCIH for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#VM detection#virtualization artifacts#registry analysis#post-compromise analysis