A penetration tester is cleaning up and covering tracks at the conclusion of a penetration test. Which of the following should the tester be sure to remove from the system? (Choose two.)

The correct answer is A. Spawned shells B. Created user accounts. Removing shells: Remove any shell programs installed when performing the pentest. Removing tester-created credentials: Be sure to remove any user accounts created during the pentest. This includes backdoor accounts. Removing tools: Remove any software tools that were installed…

Post-exploitation and lateral movement

Question

Options

ASpawned shells
BCreated user accounts
CServer logs
DAdministrator accounts
EReboot system
FARP cache

How the community answered

(31 responses)

A
77% (24)
C
6% (2)
E
3% (1)
F
13% (4)

Explanation

Removing shells: Remove any shell programs installed when performing the pentest. Removing tester-created credentials: Be sure to remove any user accounts created during the pentest. This includes backdoor accounts. Removing tools: Remove any software tools that were installed on the customer’s systems that were used to aid in the exploitation of systems.

Topics

#Post-exploitation cleanup#Covering tracks#Penetration testing methodology#System remediation

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice