While performing a penetration testing exercise, a tester executes the following command: PS c:\tools> c:\hacks\PsExec.exe \\server01.comptia.org -accepteula cmd.exe Which of the following best…

Question

Options

• ATest connectivity using PSExec on the server01 using CMD.exe.
• BPerform a lateral movement attack using PsExec.
• CSend the PsExec binary file to the server01 using CMD.exe.
• DEnable CMD.exe on the server01 through PsExec.

• A
  12% (2)
• B
  76% (13)
• C
  6% (1)
• D
  6% (1)

Explanation

Explanation

Option B is correct because the command uses PsExec - a legitimate Sysinternals tool - to remotely execute cmd.exe on a target system (server01.comptia.org), which is a classic lateral movement technique. By launching a command shell on a remote machine, the tester is moving from one compromised host to another within the network, simulating how an attacker would expand their foothold. The -accepteula flag simply suppresses the license agreement popup, a common trick to avoid detection or interruption during covert operations.

Option A is wrong because PsExec is not a connectivity testing tool - that role belongs to commands like ping or Test-NetConnection. Option C is wrong because the command is executing cmd.exe on the remote server, not transferring the PsExec binary to it. Option D is wrong because cmd.exe doesn't need to be "enabled" - it's a native Windows executable already present on the system.

Memory Tip: Think of PsExec + remote host = Lateral Movement. Anytime you see PsExec targeting another machine with a shell or executable, the goal is to move sideways through the network - a hallmark of post-exploitation activity.

No community discussion yet for this question.