A penetration tester is attempting to inject shellcode into a remote process on a Windows host. The tester has successfully allocated memory in the target process using VirtualAllocEx. What is the next step to execute the shellcode?

Change the memory protection using VirtualProtectEx

Call LoadLibrary to load the shellcode

Create a remote thread using CreateRemoteThread

Write the shellcode to the allocated memory using WriteProcessMemory

What is the purpose of manipulating process memory in the context of process injection?

To write malicious code into the address space of a target process

To read sensitive data from the target process

To increase the performance of the target process

To change the target process's priority level

A penetration tester is performing a process injection attack on a Linux host. The tester wants to inject code into a running process without creating a new thread. Which technique would be most appropriate?

Use ptrace to attach to the process and modify its memory

Use LD_PRELOAD to load a malicious shared library

Use a shellcode injection technique with mprotect and a signal handler

Use /proc/pid/mem to write to the process's memory

Which of the following is a technique used to bypass User Account Control (UAC) on Windows to escalate privileges?

Exploiting a UAC bypass vulnerability to run a process with elevated privileges without a prompt

Using the 'runas' command with administrator credentials

Disabling UAC through the registry

Using the 'net user' command to add a user to the Administrators group

CompTIAPenTest+

Domain 4Objective 3

Host-Based Attacks PT0-003 Practice Questions (Page 6)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

35%of the exam

Questions 26–29

26application · medium
A penetration tester is attempting to inject shellcode into a remote process on a Windows host. The tester has successfully allocated memory in the target process using VirtualAllocEx. What is the next step to execute the shellcode?
Select an answer first
27foundation · easy
What is the purpose of manipulating process memory in the context of process injection?
Select an answer first
28application · medium
A penetration tester is performing a process injection attack on a Linux host. The tester wants to inject code into a running process without creating a new thread. Which technique would be most appropriate?
Select an answer first
29foundation · easy
Which of the following is a technique used to bypass User Account Control (UAC) on Windows to escalate privileges?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.