A penetration tester gains initial access to a target system by exploiting a recent RCE vulnerability. The patch for the vulnerability will be deployed at the end of the week. Which of the following…

The correct answer is A. schtasks.exe E. sc.exe. schtasks.exe can create persistent scheduled tasks that execute payloads at specified intervals or system events, enabling remote reentry even after a patch is deployed. sc.exe (Service Control) can be used to create or modify Windows services to maintain persistence and allow…

Submitted by paula_co· Mar 6, 2026Post-exploitation and Lateral Movement

Question

A penetration tester gains initial access to a target system by exploiting a recent RCE vulnerability. The patch for the vulnerability will be deployed at the end of the week. Which of the following utilities would allow the tester to reenter the system remotely after the patch has been deployed? (Choose two.)

Options

Aschtasks.exe
Brundll.exe
Ccmd.exe
Dchgusr.exe
Esc.exe
Fnetsh.exe

How the community answered

(32 responses)

A
69% (22)
B
3% (1)
C
3% (1)
D
16% (5)
F
9% (3)

Explanation

schtasks.exe can create persistent scheduled tasks that execute payloads at specified intervals or system events, enabling remote reentry even after a patch is deployed. sc.exe (Service Control) can be used to create or modify Windows services to maintain persistence and allow remote code execution.

Topics

#persistence#Windows commands#scheduled tasks#service creation

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice