nerdexam
GIAC

GPEN · Question #407

You have compromised a Windows workstation using Metasploit and have injected the Meterpreter payload into the svchost process. After modifying some files to set up a persistent backdoor you realize…

Sign in or unlock GPEN to reveal the answer and full explanation for question #407. The question stem and answer options stay visible for context.

Exploitation & Post-Exploitation Techniques

Question

You have compromised a Windows workstation using Metasploit and have injected the Meterpreter payload into the svchost process. After modifying some files to set up a persistent backdoor you realize that you will need to change the modified and access times of the files to ensure that the administrator can't see the changes you made. Which Meterpreter module would you need to load in order to do this?

Options

  • ACore
  • BPriv
  • CStdapi
  • DBrowser

Unlock GPEN to see the answer

You've previewed enough free GPEN questions. Unlock GPEN for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Meterpreter#timestomping#anti-forensics#post-exploitation
Full GPEN Practice