While Performing Privilege Escalation on a Windows 7 Workstation, a Penetration

question 98

Multiple Choice

While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path. To exploit this vulnerability, which of the following criteria must be met?

• A) Permissions not disabled in the DLL
• B) Weak folder permissions of a directory in the DLL search path
• C) Write permissions in the C:\Windows\System32\imports directory
• D) DLL not cryptographically signed by the vendor

---

Definitions:

Classical Conditioning

is a learning process that occurs through associations between an environmental stimulus and a naturally occurring stimulus, first described by Ivan Pavlov.

Genetic Blueprint

The set of genetic instructions encoded in DNA that defines the characteristics of an organism.

Maturation

The process of development in which an individual matures or reaches full functionality, often used to describe the physical and psychological growth that occurs naturally with age.

Habituation

Tendency of the brain to stop attending to constant, unchanging information.