What is the primary goal of a UAC bypass technique?

To create a new user account with administrative privileges.

To hide malicious processes from the task manager.

To execute a process with elevated privileges without triggering a UAC prompt.

To disable Windows Defender and other security software.

What is the primary purpose of token impersonation in Windows privilege escalation?

To bypass antivirus detection by hiding malicious code.

To create a new user account with administrative privileges.

To assume the security context of another user or process to gain higher privileges.

To reset the password of the local administrator account.

During a test, you find that the registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run has WriteDAC permission for the Users group. You need to achieve persistence and escalate privileges. What is the most effective action?

Use the Run key to launch a service that runs as SYSTEM.

Delete the Run key and recreate it with a malicious value.

Add a new value under the Run key that executes your payload.

Change the ACL of the Run key to grant Administrators full control.

Which registry key is commonly targeted for privilege escalation because it controls a service's executable path?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

EC-CouncilCertified Penetration Testing Professional

Domain 4Objective 2

Windows Exploitation and Privilege Escalation CPENT Practice Questions (Page 4)

Part of the Perimeter Evasion and Host Exploitation domain, which makes up ~13% of our current practice bank.

40questions here

8free pages

10concepts

Questions 16–20

16foundation · easy
What is the primary goal of a UAC bypass technique?
Select an answer first
17foundation · easy
Which Windows privilege is commonly required to perform token impersonation attacks?
Select an answer first
18foundation · easy
What is the primary purpose of token impersonation in Windows privilege escalation?
Select an answer first
19application · medium
During a test, you find that the registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run has WriteDAC permission for the Users group. You need to achieve persistence and escalate privileges. What is the most effective action?
Select an answer first
20foundation · easy
Which registry key is commonly targeted for privilege escalation because it controls a service's executable path?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.