During a Penetration Test, a Tester Identifies Traditional Antivirus Running

question 74

Multiple Choice

During a penetration test, a tester identifies traditional antivirus running on the exploited server. Which of the following techniques would BEST ensure persistence in a post-exploitation phase?

• A) Shell binary placed in C:\windows\temp
• B) Modified daemons
• C) New user creation
• D) Backdoored executables

---

Definitions:

Measurements

Quantitative data collected by noting the extent, dimension, quantity, or capacity of something using standard units.

Interquartile Range

The difference between the 75th and 25th percentiles of a data set, measuring the spread of the middle 50% of the data.

Summary Statistics

Numeric values that summarize and provide information about your sample data, including measures like mean, median, and standard deviation.

Lower Fence

A term used in descriptive statistics and boxplot construction, referring to a value below which lies an outlier in a dataset, typically calculated as Q1 - 1.5*IQR, where Q1 is the first quartile and IQR is the interquartile range.