You have administrative access to a domain-joined server and want to move laterally to another server using a scheduled task. You have the credentials of a domain user who is a local administrator on the target. Which command would you use to create a scheduled task on the remote server?

schtasks /create /s TARGET /u DOMAIN\user /p password /tn task /tr "cmd.exe /c whoami" /sc once /st 00:00

net use \\TARGET\C$ /user:DOMAIN\user password && copy file \\TARGET\C$\Windows\Temp

psexec \\TARGET -u DOMAIN\user -p password cmd.exe /c whoami

wmic /node:TARGET process call create "cmd.exe /c whoami"

Which of the following is a common technique attackers use to exploit GPOs for privilege escalation?

Deleting the default domain policy to weaken security

Changing the domain functional level

Creating a new DNS zone in the GPO

Modifying a GPO to add a user to the local Administrators group on target machines

GIAC Defending Advanced Threats

Domain 2Objective 3

Active Directory/Domains GDAT Practice Questions (Page 5)

Part of the Post-Exploitation and Movement domain, which makes up ~29% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–23 in this domain), expect 5–8 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

Questions 21–25

21application · medium
You have administrative access to a domain-joined server and want to move laterally to another server using a scheduled task. You have the credentials of a domain user who is a local administrator on the target. Which command would you use to create a scheduled task on the remote server?
Select an answer first
22foundation · easy
Which PowerShell cmdlet is commonly used to enumerate all Active Directory groups in a domain?
Select an answer first
23foundation · easy
Which type of trust is automatically created between a parent and child domain in the same forest?
Select an answer first
24foundation · easy
Which Windows built-in tool can be used to create a scheduled task on a remote machine for lateral movement?
Select an answer first
25foundation · easy
Which of the following is a common technique attackers use to exploit GPOs for privilege escalation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDAT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDAT” is a trademark of its owner, used for identification only.

Active Directory/Domains GDAT Practice Questions (Page 5)

Questions 21–25

You have administrative access to a domain-joined server and want to move laterally to another server using a scheduled task. You have the credentials of a domain user who is a local administrator on the target. Which command would you use to create a scheduled task on the remote server?

Which PowerShell cmdlet is commonly used to enumerate all Active Directory groups in a domain?

Which type of trust is automatically created between a parent and child domain in the same forest?

Which Windows built-in tool can be used to create a scheduled task on a remote machine for lateral movement?

Which of the following is a common technique attackers use to exploit GPOs for privilege escalation?

Keep studying — Post-Exploitation and Movement