Which of the following is an example of an artifact left behind by penetration testing activities?

A penetration testing methodology document

A new user account created on the target system

What is the primary purpose of artifact removal in post-exploitation?

To ensure that the target system remains functional

To comply with legal requirements

To increase the speed of the penetration test

To minimize the chance of detection by the target organization

A penetration tester needs to maintain access to a compromised Windows host even after a reboot. Which technique is specifically designed to achieve this goal?

Using a reverse shell that only runs while the current session is active

Deleting event logs to avoid detection

Creating a scheduled task that runs at system startup

CompTIAPenTest+

Domain 5Objective 1

Post-Exploitation Activities PT0-003 Practice Questions (Page 2)

Part of the Post-exploitation and lateral movement domain, which accounts for 14% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~9–15 in this domain), expect 5–8 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

12concepts

14%of the exam

Questions 6–10

6foundation · easy
Which of the following is an example of an artifact left behind by penetration testing activities?
Select an answer first
7foundation · easy
Which Windows log is most likely to contain evidence of a penetration tester's activities, such as logon events?
Select an answer first
8foundation · easy
Which command-line utility is commonly used to create, query, and manage scheduled tasks on Windows systems?
Select an answer first
9foundation · easy
What is the primary purpose of artifact removal in post-exploitation?
Select an answer first
10foundation · easy
A penetration tester needs to maintain access to a compromised Windows host even after a reboot. Which technique is specifically designed to achieve this goal?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.

Post-Exploitation Activities PT0-003 Practice Questions (Page 2)

Questions 6–10

Which of the following is an example of an artifact left behind by penetration testing activities?

Which Windows log is most likely to contain evidence of a penetration tester's activities, such as logon events?

Which command-line utility is commonly used to create, query, and manage scheduled tasks on Windows systems?

What is the primary purpose of artifact removal in post-exploitation?

A penetration tester needs to maintain access to a compromised Windows host even after a reboot. Which technique is specifically designed to achieve this goal?

Keep studying — Post-exploitation and lateral movement