Which of the following is a common persistence mechanism that can be scripted on a Windows system?

Creating a scheduled task that runs a payload at logon

After compromising a Windows host, you need to automate the collection of credentials from multiple machines in the same domain. You have administrative access to all machines and want to minimize the number of interactive sessions. Which scripting approach is most efficient?

Create a scheduled task on each machine that runs a script locally and writes output to a shared folder.

Use PsExec to run a script on each machine sequentially.

Write a Python script that uses the impacket library to perform remote credential dumping.

Write a PowerShell script that uses Invoke-Command to run credential-dumping cmdlets on each remote machine and collect the output.

GIAC Exploit Researcher and Advanced Penetration Tester

Domain 4Objective 2

Practical Scripting for Offensive Operations GXPN Practice Questions (Page 6)

Part of the Offensive Scripting and Cryptography domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~13–22 in this domain), expect 7–11 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 26–30

26foundation · easy
When scripting a buffer overflow exploit, which Python module is used to pack integer addresses into little-endian byte strings?
Select an answer first
27foundation · easy
Which of the following is a common persistence mechanism that can be scripted on a Windows system?
Select an answer first
28foundation · easy
Which Python module is commonly used to generate and manipulate raw packets for exploit development and network testing?
Select an answer first
29foundation · easy
Which Python module is commonly used to run external tools and capture their output for parsing?
Select an answer first
30application · medium
After compromising a Windows host, you need to automate the collection of credentials from multiple machines in the same domain. You have administrative access to all machines and want to minimize the number of interactive sessions. Which scripting approach is most efficient?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GXPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GXPN” is a trademark of its owner, used for identification only.

Practical Scripting for Offensive Operations GXPN Practice Questions (Page 6)

Questions 26–30

When scripting a buffer overflow exploit, which Python module is used to pack integer addresses into little-endian byte strings?

Which of the following is a common persistence mechanism that can be scripted on a Windows system?

Which Python module is commonly used to generate and manipulate raw packets for exploit development and network testing?

Which Python module is commonly used to run external tools and capture their output for parsing?

After compromising a Windows host, you need to automate the collection of credentials from multiple machines in the same domain. You have administrative access to all machines and want to minimize the number of interactive sessions. Which scripting approach is most efficient?

Keep studying — Offensive Scripting and Cryptography