A tester compromises a target host and then wants to maintain persistent access. Which of the following is the best way for the attacker to accomplish the objective?

The correct answer is A. Configure and register a service. Configuring and Registering a Service: Registering a malicious service ensures that it starts automatically with the system, providing persistence even after reboots. This method is stealthier than others and is commonly used in advanced persistent threat (APT)

Submitted by yousef_jo· Mar 6, 2026Post-exploitation and Lateral Movement

Question

Options

AConfigure and register a service.
BInstall and run remote desktop software.
CSet up a script to be run when users log in.
DPerform a kerberoasting attack on the host.

How the community answered

(29 responses)

A
69% (20)
B
7% (2)
C
7% (2)
D
17% (5)

Explanation

Configuring and Registering a Service: Registering a malicious service ensures that it starts automatically with the system, providing persistence even after reboots. This method is stealthier than others and is commonly used in advanced persistent threat (APT)

Topics

#persistence#Windows services#post-exploitation

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice