A penetration tester has gained access to a Windows server via a remote code execution vulnerability. The tester wants to maintain access after the vulnerability is patched. Which method is most appropriate?

Create a new local user account and add it to the Administrators group.

Disable the firewall to allow future remote connections.

Install a backdoor as a Windows service that runs automatically at startup.

Use a scheduled task to run a reverse shell every hour.

EC-CouncilEthical Hacking Essentials

Domain 3Objective 4

Gaining Access, Maintaining Access, and Covering Tracks EHE Practice Questions (Page 6)

Part of the Ethical Hacking Methodology domain, which makes up ~12% of our current practice bank.

26questions here

6free pages

3concepts

Questions 26–26

26application · medium
A penetration tester has gained access to a Windows server via a remote code execution vulnerability. The tester wants to maintain access after the vulnerability is patched. Which method is most appropriate?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Gaining Access, Maintaining Access, and Covering Tracks EHE Practice Questions (Page 6)

Questions 26–26

A penetration tester has gained access to a Windows server via a remote code execution vulnerability. The tester wants to maintain access after the vulnerability is patched. Which method is most appropriate?

Keep studying — Ethical Hacking Methodology