Solved

During a Penetration Test, a Tester Finds a Target That

Question 24

Multiple Choice

During a penetration test, a tester finds a target that is running MS SQL 2000 with default credentials.  The tester assumes that the service is running with Local System account. How can this weakness be exploited to access the system?


A) Using the Metasploit psexec module setting the SA / Admin credential
B) Invoking the stored procedure xp_shell to spawn a Windows command shell
C) Invoking the stored procedure cmd_shell to spawn a Windows command shell
D) Invoking the stored procedure xp_cmdshell to spawn a Windows command shell

Correct Answer:

verifed

Verified

Unlock this answer now
Get Access to more Verified Answers free of charge

Related Questions

Q19: An organization deployed Microsoft Azure cloud services

Q20: A network security administrator is worried about

Q21: Which initial procedure should an ethical hacker

Q22: When creating a security program, which approach

Q23: Which tool is used to automate SQL

Q25: How is sniffing broadly categorized?<br>A) Active and

Q26: Fred, who owns a company called Skyfeit

Q27: James is a security consultant at Big

Q28: After gaining access to the password hashes

Q29: A penetration tester is conducting a port