ExamTopics Logo
Mail Us[email protected]
Menu
Eccouncil Discussions
exam questions

Exam 312-50v10 All Questions

View all questions & answers for the 312-50v10 exam
Go to Exam

Exam 312-50v10 topic 1 question 236 discussion

Actual exam question from ECCouncil's 312-50v10
Question #: 236
Topic #: 1
[All 312-50v10 Questions]

Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-
1223352397-1872883824-861252104-501. What needs to happen before Matthew has full administrator access?

  • A. He needs to gain physical access.
  • B. He must perform privilege escalation.
  • C. He already has admin privileges, as shown by the "501" at the end of the SID.
  • D. He needs to disable antivirus protection.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by TrendMicroDLPSSucks at Aug. 21, 2020, 6:22 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
sandman310323
11 months ago
500 is admin
upvoted 2 times
...
TrendMicroDLPSSucks
11 months ago
The SID for the Guest account always ends in 501. You'll also find SIDs on every installation of Windows which correspond to certain built-in accounts.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel