During a penetration test, a tester attempts to pivot from one Windows 10 system to another Windows system. The penetration tester thinks a local firewall is blocking connections. Which of the…

The correct answer is D. netsh.exe. netsh.exe is a built-in Windows utility used to configure and manage the Windows firewall (among other networking settings). A penetration tester can use it to disable or modify firewall rules, which is helpful when pivoting between systems.

Submitted by joshua94· Mar 6, 2026Post-exploitation and Lateral Movement

Question

During a penetration test, a tester attempts to pivot from one Windows 10 system to another Windows system. The penetration tester thinks a local firewall is blocking connections. Which of the following command-line utilities built into Windows is most likely to disable the firewall?

Options

Acertutil.exe
Bbitsadmin.exe
Cmsconfig.exe
Dnetsh.exe

How the community answered

(32 responses)

A
3% (1)
B
6% (2)
C
3% (1)
D
88% (28)

Explanation

netsh.exe is a built-in Windows utility used to configure and manage the Windows firewall (among other networking settings). A penetration tester can use it to disable or modify firewall rules, which is helpful when pivoting between systems.

Topics

#Windows firewall#netsh#lateral movement#post-exploitation

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice