ExamTopics Logo
Mail Us[email protected]
Menu
Eccouncil Discussions
exam questions

Exam 312-50 All Questions

View all questions & answers for the 312-50 exam
Go to Exam

Exam 312-50 topic 3 question 31 discussion

Actual exam question from ECCouncil's 312-50
Question #: 31
Topic #: 3
[All 312-50 Questions]

During a penetration test, a tester finds a target that is running MS SQL 2000 with default credentials. The tester assumes that the service is running with Local
System account. How can this weakness be exploited to access the system?

  • A. Using the Metasploit psexec module setting the SA / Admin credential
  • B. Invoking the stored procedure xp_shell to spawn a Windows command shell
  • C. Invoking the stored procedure cmd_shell to spawn a Windows command shell
  • D. Invoking the stored procedure xp_cmdshell to spawn a Windows command shell
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by dorinh at Nov. 30, 2021, 5:03 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
dorinh
6 months, 1 week ago
xp_cmdshell - Spawns a Windows command shell and passes in a string for execution. Any output is returned as rows of text.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel