While Performing Privilege Escalation on a Windows 7 Workstation, a Penetration

question 98

Multiple Choice

While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path. To exploit this vulnerability, which of the following criteria must be met?

• A) Permissions not disabled in the DLL
• B) Weak folder permissions of a directory in the DLL search path
• C) Write permissions in the C:\Windows\System32\imports directory
• D) DLL not cryptographically signed by the vendor

---

Definitions:

GAAP

Generally Accepted Accounting Principles, a set of rules and standards used for financial reporting and accounting practice in the United States.

Income Statement

A financial report that shows a company's financial performance over a specific period, detailing revenue, expenses, and net profit or loss.

Distribution

The process of delivering products from the supplier or manufacturer to the end consumer through various distribution channels.

IFRS

International Financial Reporting Standards, a set of accounting standards developed by the International Accounting Standards Board that guide how companies prepare and present their financial statements.