GIAC
GPEN · Question #108
GPEN Question #108: Real Exam Question with Answer & Explanation
The correct answer is C. PsExec. PsExec is a Sysinternals command-line utility that allows administrators to execute processes and commands on remote Windows systems without requiring manual client installation.
Question
Which of the following tools connects to and executes files on remote systems?
Options
- ASpector
- BHk.exe
- CPsExec
- DGetAdmin.exe
Explanation
PsExec is a Sysinternals command-line utility that allows administrators to execute processes and commands on remote Windows systems without requiring manual client installation.
Common mistakes.
- A. Spector is a commercial employee monitoring and parental control application that records local user activity; it does not facilitate remote command execution on other systems.
- B. Hk.exe is a Windows NT local privilege escalation exploit that targets the kernel to gain SYSTEM-level access on the local machine, not a remote execution tool.
- D. GetAdmin.exe is a privilege escalation utility for Windows NT that elevates a local account to administrator, and does not connect to or execute files on remote systems.
Concept tested. PsExec remote process execution via Sysinternals
Reference. https://learn.microsoft.com/en-us/sysinternals/downloads/psexec
Community Discussion
No community discussion yet for this question.