A Penetration Tester Has Gained Access to a Marketing Employee's

question 60

Multiple Choice

A penetration tester has gained access to a marketing employee's device. The penetration tester wants to ensure that if the access is discovered, control of the device can be regained. Which of the following actions should the penetration tester use to maintain persistence to the device? (Select TWO.)

• A) Place an entry in HKLM\Software\Microsoft\CurrentVersion\Run to call au57d.ps1.
• B) Place an entry in C:\windows\system32\drivers\etc\hosts for 12.17.20.10 badcomptia.com.
• C) Place a script in C:\users\%username\local\appdata\roaming\temp\au57d.ps1.
• D) Create a fake service in Windows called RTAudio to execute manually.
• E) Place an entry for RTAudio in HKLM\CurrentControlSet\Services\RTAudio.
• F) Create a schedule task to call C:\windows\system32\drivers\etc\hosts.

---

Definitions:

Total Assets

The sum of all the assets owned by a company, including both current and non-current assets.

Return on Investment

A financial metric used to measure the profitability or efficiency of an investment, calculated by dividing net profit by the initial cost of the investment.

Required Rate

The minimum rate of return that an investment or project must offer to be considered viable or attractive.

Operating Assets

Assets used in the daily operations of a business to generate revenue, such as plant, equipment, inventory, and receivables.