Test Questions Review

When a process crashes, what artifact remains?

What is Volume Shadow Storage?

Which technique is used to replicate domain information to an attacker host?

what command allows you to bypass powershell execution policy restrictions?

How many terminals does Windows NT 5 come pre-installed with?

What linux script can be used to enumerate a windows domain?

what meterpreter commands can be utilized to redirect traffic through an established session?

in NT 6+ which process is the parent of terminal applications?

What are Prefetch files?

Which process stores the terminal history?

What is all kerberos encryption derived from?

Public Key Interface distributes public keys using________________?

Which of the following registry hives do not exist in Windows?

Where should an attacker search for user files for collection?

What share is exclusively found Domain Controllers?

Which of the following mimikatz commands is used in dumping registry SAM password hashes?

What technique is used to attack Windows DLL load order?

Which of the following mimikatz commands will grant the current account the required permissions to debug processes?

How can an attacker determine the patch level of a Windows host?

Which utility is used to modify the firewall from the command line?

What is used during packet processing for signature-based scanning?

What Windows utility an be used to download attacker files remotely?

What python keyword is used to iterate over objects?

In process memory layout, what direction does the Heap Section grow?

True or False: A community string is a component of SNMP

What utility is used to modify the windows boot process?

Which port is used for Domain Replication?

Which protocol typically sits between the client and Authentication Server for enterprise wireless networks?