During a Penetration Test, a Tester Runs a Phishing Campaign

question 20

Multiple Choice

During a penetration test, a tester runs a phishing campaign and receives a shell from an internal PC running Windows 10 OS. The tester wants to perform credential harvesting with Mimikatz. Which of the following registry changes would allow for credential caching in memory?

• A) reg add HKLM\System\ControlSet002\Control\SecurityProviders\WDigest /v userLogoCredential /t REG_DWORD /d 0
• B) reg add HKCU\System\CurrentControlSet\Control\SecurityProviders\WDigest /v userLogoCredential /t REG_DWORD /d 1
• C) reg add HKLM\Software\CurrentControlSet\Control\SecurityProviders\WDigest /v userLogoCredential /t REG_DWORD /d 1
• D) reg add HKLM\System\CurrentControlSet\Control\SecurityProviders\WDigest /v userLogoCredential /t REG_DWORD /d 1

---

Definitions:

Job Offer

A proposal of employment from an employer to a potential employee, detailing the terms of the position.

Group Interview

A group interview is a recruitment process where multiple candidates are interviewed simultaneously, allowing for the assessment of their interaction and teamwork skills.

Organization's Operations

The day-to-day activities and processes that a business or organization engages in to function and achieve its objectives.

Difficult Decision

A choice that is hard to make, often due to the complexity of the situation or the potential consequences involved.