A penetration tester is researching a path to escalate privileges. While enumerating current user privileges, the tester observes the following output: Which of the following privileges should the…

The correct answer is A. SeImpersonatePrivilege. ImpersonatePrivilege for Escalation: The SeImpersonatePrivilege allows a process to impersonate a user after authentication. This is a common privilege used in token stealing or pass-the-token attacks to escalate privileges. Exploits like Rotten Potato and Juicy Potato…

Submitted by mike_84· Mar 6, 2026Post-exploitation and Lateral Movement

Question

A penetration tester is researching a path to escalate privileges. While enumerating current user privileges, the tester observes the following output:

Which of the following privileges should the tester use to achieve the goal?

Exhibit

Options

ASeImpersonatePrivilege
BSeCreateGlobalPrivilege
CSeChangeNotifyPrivilege
DSeManageVolumePrivilege

How the community answered

(53 responses)

A
87% (46)
B
8% (4)
C
4% (2)
D
2% (1)

Explanation

ImpersonatePrivilege for Escalation: The SeImpersonatePrivilege allows a process to impersonate a user after authentication. This is a common privilege used in token stealing or pass-the-token attacks to escalate privileges. Exploits like Rotten Potato and Juicy Potato specifically target this privilege to elevate access to

Topics

#Windows privilege escalation#SeImpersonatePrivilege#post-exploitation

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice