Privilege Escalation CEH Practice Questions (Page 8)

Questions 36–38

1. 36foundation · easy

   Which tool is specifically designed to enumerate potential privilege escalation vectors on Linux systems?

   • AJohn the Ripper
   • BLinPEAS
   • CMimikatz
   • DWinPEAS
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   A penetration tester gains access to a low-privileged user account on a target system. The tester then exploits a vulnerability to obtain SYSTEM-level privileges. This is an example of which type of privilege escalation?

   • ALateral movement
   • BInitial exploitation
   • CHorizontal privilege escalation
   • DVertical privilege escalation
   Reveal Solution Discussion Select an answer first
3. 38application · medium

   A Windows service 'UpdateSvc' runs as SYSTEM. The service's executable is located at 'C:\Windows\Temp\update.exe'. The 'C:\Windows\Temp' directory is writable by all users. A low-privileged user wants to escalate privileges. What is the most effective technique?

   • AReplace 'update.exe' with a malicious executable
   • BUse the unquoted service path to execute a malicious file
   • CCreate a new service that runs a malicious binary
   • DModify the service's registry entry to point to a malicious executable
   Reveal Solution Discussion Select an answer first