Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CompTIA PT0-003 Exam - Topic 5 Question 38 Discussion

While performing a penetration test, a tester executes the following command:PS c:\tools> c:\hacks\PsExec.exe \\server01.cor.ptia.org -accepteula cmd.exeWhich of the following best explains what the tester is trying to do?
B) Perform a lateral movement attack using PsExec
A) Test connectivity using PsExec on the server01 using cmd.exe
C) Send the PsExec binary file to the server01 using cmd.exe
D) Enable cmd.exe on the server01 through PsExec

CompTIA PT0-003 Exam - Topic 5 Question 38 Discussion

Actual exam question for CompTIA's PT0-003 exam
Question #: 38
Topic #: 5
[All PT0-003 Questions]

While performing a penetration test, a tester executes the following command:

PS c:\tools> c:\hacks\PsExec.exe \\server01.cor.ptia.org -accepteula cmd.exe

Which of the following best explains what the tester is trying to do?

Show Suggested Answer Hide Answer
Suggested Answer: B

PsExec is a Windows Sysinternals tool that allows users to execute commands on a remote system without needing an interactive login session. The command above is executing cmd.exe on a remote Windows Active Directory domain machine (server01.cor.ptia.org).

Option A (Test connectivity using PsExec) : The command does not check connectivity; it executes a command remotely.

Option B (Perform a lateral movement attack) : Correct. Lateral movement occurs when an attacker moves from one compromised machine to another within a network, using valid credentials. PsExec is often used for this purpose.

Option C (Send the PsExec binary) : The command runs cmd.exe remotely, but it does not transfer PsExec itself.

Option D (Enable cmd.exe) : cmd.exe is already enabled by default on most Windows systems.

Reference: CompTIA PenTest+ PT0-003 Official Guide -- Lateral Movement with PsExec


Contribute your Thoughts:

0/2000 characters
Abel
3 hours ago
I think the -accepteula part means it's accepting the license agreement, which makes me lean towards it being a command execution rather than just testing connectivity.
upvoted 0 times
...
Kenneth
5 days ago
I feel like I've seen a question like this before, and it was about testing connectivity. But now I'm second-guessing if that's really what PsExec does.
upvoted 0 times
...
Jacob
10 days ago
I remember something about lateral movement in my studies. This looks like it could be a way to access another machine, so B might be the right choice.
upvoted 0 times
...
Youlanda
16 days ago
I think the command is trying to run cmd.exe on the remote server, so maybe it's about enabling it? But I'm not entirely sure.
upvoted 0 times
...

Save Cancel