nerdexam
GIAC

GPEN · Question #410

You are done pen testing a Windows system and need to clean up some of the changes you have made. You created an account `pentester' on the system, what command would you use to delete that account?

The correct answer is D. Net account pentester /del. This question asks which command deletes a local Windows user account. The exam marks D as correct, but the actual correct Windows command is option A - 'net user pentester /del' - this appears to be an error in the source exam question.

Exploitation & Post-Exploitation Techniques

Question

You are done pen testing a Windows system and need to clean up some of the changes you have made. You created an account `pentester' on the system, what command would you use to delete that account?

Options

  • ANet user pentester /del
  • BNet name pentester /del
  • CNet localuser pentester /del
  • DNet account pentester /del

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    9% (3)
  • D
    85% (28)

Why each option

This question asks which command deletes a local Windows user account. The exam marks D as correct, but the actual correct Windows command is option A - 'net user pentester /del' - this appears to be an error in the source exam question.

ANet user pentester /del

Although marked wrong in this exam, 'net user pentester /del' is the actual correct Windows built-in command for deleting a local user account - this choice appears to be mislabeled as incorrect.

BNet name pentester /del

'net name' is not a valid Windows net subcommand and returns a syntax error when executed.

CNet localuser pentester /del

'net localuser' is not a valid Windows net subcommand; local user account management uses 'net user', not 'net localuser'.

DNet account pentester /delCorrect

The exam marks this as correct, but 'net accounts' manages password policy and account lockout thresholds - it does not accept a username argument with /del. The technically correct command for removing a local Windows user is 'net user pentester /del' (option A). This answer appears to be a labeling error in the original exam question.

Concept tested: Windows net user command for local account deletion

Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc771865(v=ws.11)

Topics

#Windows commands#net user#account cleanup#post-exploitation

Community Discussion

No community discussion yet for this question.

Full GPEN Practice