A penetration tester has successfully exploited a vulnerability on a web server and gained a low-privileged shell. The tester's objective is to demonstrate the potential impact of a full compromise. Which post-exploitation activity should the tester prioritize next?

Lateral movement to other servers immediately

Data exfiltration of sensitive files

Privilege escalation to gain administrative access

Persistence by installing a backdoor

GIAC Critical Controls Certification

Domain 7Objective 2

Penetration Testing GCCC Practice Questions (Page 10)

Part of the Incident Response and Testing domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 3–5 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

7concepts

Questions 46–47

46application · medium
A penetration tester has successfully exploited a vulnerability on a web server and gained a low-privileged shell. The tester's objective is to demonstrate the potential impact of a full compromise. Which post-exploitation activity should the tester prioritize next?
Select an answer first
47foundation · easy
In the PTES methodology, which phase involves gathering information about the target without actively engaging with the target systems?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.

Penetration Testing GCCC Practice Questions (Page 10)

Questions 46–47

A penetration tester has successfully exploited a vulnerability on a web server and gained a low-privileged shell. The tester's objective is to demonstrate the potential impact of a full compromise. Which post-exploitation activity should the tester prioritize next?

In the PTES methodology, which phase involves gathering information about the target without actively engaging with the target systems?

Keep studying — Incident Response and Testing