nerdexam
ExamsPT0-002Questions#8
CompTIACompTIA

PT0-002 · Question #8

PT0-002 Question #8: Real Exam Question with Answer & Explanation

The correct answer is B: PowerShell modules. WMI allows scripting languages (such as VBScript or Windows PowerShell) to manage Microsoft Windows personal computers and servers, both locally and remotely. https://en.m.wikipedia.org/wiki/Windows_Management_Instrumentation

Post-exploitation and lateral movement

Question

A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function. Which of the following OS or filesystem mechanisms is MOST likely to support this objective?

Options

  • AAlternate data streams
  • BPowerShell modules
  • CMP4 steganography
  • DPsExec

Explanation

WMI allows scripting languages (such as VBScript or Windows PowerShell) to manage Microsoft Windows personal computers and servers, both locally and remotely. https://en.m.wikipedia.org/wiki/Windows_Management_Instrumentation

Topics

#Post-exploitation#Windows execution#WMI#PowerShell

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PT0-002 PracticeBrowse All PT0-002 Questions