During a penetration test, a tester identifies traditional antivirus running on the exploited server. Which of the following techniques would BEST ensure persistence in a post-exploitation phase?
A) Shell binary placed in C:\windows emp
B) Modified daemons
C) New user creation
D) Backdoored executables

Question

During a penetration test, a tester identifies traditional antivirus running on the exploited server. Which of the following techniques would BEST ensure persistence in a post-exploitation phase?
A) Shell binary placed in C:\windows	emp
B) Modified daemons
C) New user creation
D) Backdoored executables

Quizplus · Accepted Answer

Creating a new user account is a technique that can ensure persistence, as it allows the attacker to maintain access even if other methods are detected and removed by antivirus software.

During a Penetration Test, a Tester Identifies Traditional Antivirus Running