Post-Exploitation and Advanced Threat Techniques GISF Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A penetration tester has compromised a standard user account on a Windows domain. The tester wants to gain domain administrator privileges. Which approach is an example of vertical privilege escalation?

   • AUsing the standard user account to access another user's files
   • BExploiting a vulnerability in a local service to run code as SYSTEM
   • CUsing the standard user account to connect to a file share
   • DCreating a scheduled task to run a script
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   During an incident response, you find that an attacker used the built-in Windows tool `wmic` to query running processes on multiple workstations from a single compromised server. The attacker did not install any additional tools on the workstations. Which post-exploitation phase does this activity represent?

   • APersistence
   • BLateral movement
   • CPrivilege escalation
   • DData exfiltration
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security team is designing a defense-in-depth strategy to mitigate post-exploitation activities. They have limited budget and cannot deploy new agents. They need to prioritize controls that address persistence, privilege escalation, and lateral movement. Which combination of controls would be MOST effective?

   • AIntrusion detection system, log management, and password policies
   • BApplication allowlisting, network segmentation, and least privilege
   • CData loss prevention, encryption, and backup
   • DAntivirus, firewalls, and patch management
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following techniques is commonly used for lateral movement in a Windows environment?

   • APhishing to obtain credentials
   • BSQL injection to extract data
   • CPort scanning to identify open ports
   • DPass-the-Hash (PtH) to authenticate to other systems
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the difference between vertical and horizontal privilege escalation?

   • AVertical escalation uses a vulnerability, while horizontal escalation uses social engineering
   • BVertical escalation is performed remotely, while horizontal escalation is performed locally
   • CVertical escalation gains higher privileges (e.g., user to admin), while horizontal escalation gains the same privileges as another user
   • DVertical escalation moves to another user's account, while horizontal escalation gains root access
   Reveal Solution Discussion Select an answer first