A penetration tester gains initial access to a Windows workstation on a client's network. The tester wants to determine the next target but does not want to install software on the workstation…

The correct answer is A. mmc.exe. This built-in Windows management console can be used with native snap-ins (such as Active Directory Users and Computers, DNS, or Computer Management, if accessible) to browse domain resources and identify servers, systems, and administrative targets without installing any…

Submitted by daniela_cl· Mar 6, 2026Post-exploitation and Lateral Movement

Question

A penetration tester gains initial access to a Windows workstation on a client’s network. The tester wants to determine the next target but does not want to install software on the workstation. Which of the following is the best tool to list potential targets?

Options

Ammc.exe
BNetstat
CMimikatz
Dexplorer.exe
ECME

How the community answered

(29 responses)

A
83% (24)
B
3% (1)
D
10% (3)
E
3% (1)

Explanation

This built-in Windows management console can be used with native snap-ins (such as Active Directory Users and Computers, DNS, or Computer Management, if accessible) to browse domain resources and identify servers, systems, and administrative targets without installing any additional tools on the workstation.

Topics

#internal reconnaissance#Windows tools#Active Directory#network enumeration

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice