After gaining access to a previous system, a penetration tester runs an Nmap scan against a network with the following results: The tester then runs the following command from the previous exploited…

The correct answer is A. The tester input the incorrect IP address. The command failed because the tester entered the incorrect IP address. The Nmap output shows a specific IP for the target host, but the subsequent command (likely an RDP or PowerShell remoting attempt) was directed at a different IP. Since the command was run from a previously…

Post-exploitation and lateral movement

Question

After gaining access to a previous system, a penetration tester runs an Nmap scan against a network with the following results:

The tester then runs the following command from the previous exploited system, which fails:

Which of the following explains the reason why the command failed?

Exhibit

Options

AThe tester input the incorrect IP address.
BThe command requires the ג €"port 135 option.
CAn account for RDP does not exist on the server.
DPowerShell requires administrative privilege.

How the community answered

(27 responses)

A
74% (20)
B
4% (1)
C
15% (4)
D
7% (2)

Explanation

The command failed because the tester entered the incorrect IP address. The Nmap output shows a specific IP for the target host, but the subsequent command (likely an RDP or PowerShell remoting attempt) was directed at a different IP. Since the command was run from a previously exploited pivot system, it is easy to mistakenly reference the wrong address from the scan results. The other options are plausible distractors - port 135 is used by RPC/WMI not RDP, RDP accounts typically exist by default, and PowerShell remoting does require privilege but that is not the stated reason for failure here.

Topics

#PowerShell Remoting#Lateral Movement#IP Addressing#Network Troubleshooting

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice