Crucial Exams

Certified Ethical Hacker (CEH) Practice Question

During a post-exploitation phase on a Windows Server 2019 host you have obtained NT AUTHORITY\SYSTEM privileges through a vulnerable service. To ensure your custom reverse-shell executable (rev.exe) is started automatically at every boot with SYSTEM rights, even if all local account passwords are later reset, which of the following is the most reliable persistence technique to use?

  • Create a new Windows service with sc.exe pointing to rev.exe, set the start type to Auto, and run it under the LocalSystem account.

  • Enable Remote Desktop and add an inbound rule for TCP 3389 to reconnect later using stolen credentials.

  • Append rev.exe to the AppInit_DLLs value in HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows and set LoadAppInit_DLLs to 1.

  • Add a rev.exe entry to HKCU\Software\Microsoft\Windows\CurrentVersion\Run so it launches at the next interactive logon.

Certified Ethical Hacker (CEH)
System Hacking Phases and Attack Techniques
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot