During an external penetration test, the consultant identifies a Windows-based server that is running Apache Tomcat Manager with a default username and password combination. After uploading a WAR…

During an external penetration test, the consultant identifies a Windows-based server that is running Apache Tomcat Manager with a default username and password combination. After uploading a WAR file, the consultant has the ability to execute commands via a browser under the context of NT AUTHORITY/SYSTEM. Which of the following commands would allow the consultant to create a user and put the newly created user in the administrators group? (Choose two)