A penetration tester gains shell access to a Windows host. The tester needs to permanently turn off protections in order to install additional payload. Which of the following commands is most…

The correct answer is A. sc config <svc_name> start=disabled. The sc config command is used to configure service startup settings in Windows. Using start=disabled will permanently disable a specific service, effectively turning off protections such as antivirus or other monitoring services.

Submitted by viktor_hu· Mar 6, 2026Post-exploitation and Lateral Movement

Question

A penetration tester gains shell access to a Windows host. The tester needs to permanently turn off protections in order to install additional payload. Which of the following commands is most appropriate?

Options

Asc config <svc_name> start=disabled
Bsc query state= all
Cpskill <pid_svc_name>
Dnet config <svc_name>

How the community answered

(38 responses)

A
71% (27)
B
8% (3)
C
5% (2)
D
16% (6)

Explanation

The sc config command is used to configure service startup settings in Windows. Using start=disabled will permanently disable a specific service, effectively turning off protections such as antivirus or other monitoring services.

Topics

#Windows commands#service management#persistence#post-exploitation

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice