Windows Privilege Escalation

What is the default user account created during the installation of Windows?

Administrator

Guest

User

DefaultUser

Which command can be used to view the current logged-in users in Windows?

Whoami

Netstat

Tasklist

Query user

Which privilege allows a user to install software and modify system settings?

User

Power User

Administrator

Guest

Which built-in group has the highest level of privileges in Windows?

Administrators

Users

Guests

Power Users

Which type of privilege escalation occurs when an attacker gains access to higher-level privileges by exploiting a vulnerability in a program or service?

Vertical Privilege Escalation

Horizontal Privilege Escalation

Lateral Movement

Remote Code Execution

Which Windows feature allows a program to run with elevated privileges without prompting the user for consent?

User Account Control (UAC)

Run as Administrator

Elevated Mode

Task Scheduler

Which registry key contains information about installed software on a Windows system?

HKEY_LOCAL_MACHINE\SOFTWARE

HKEY_CURRENT_USER\Software

HKEY_CLASSES_ROOT

HKEY_USERS\.DEFAULT\Software

Which type of privilege escalation involves exploiting misconfigurations or vulnerabilities in the operating system itself?

Local Privilege Escalation

Remote Privilege Escalation

Physical Privilege Escalation

Network Privilege Escalation

What is the purpose of a DLL hijacking attack?

To gain unauthorized access to a system

To escalate privileges

To execute malicious code within a legitimate process

To bypass firewall restrictions

Which Windows feature allows users to run programs with limited privileges, reducing the risk of privilege escalation?

RDP uses port 3389 by default for remote desktop connections. 12. Which built-in group in Windows has limited access rights and is intended for users who should not have administrative privileges?

Users

Administrators

Guests

Power Users

Which command can be used to list all running processes on a Windows system?

Tasklist

Netstat

Ipconfig

Ping

Which type of privilege escalation involves gaining higher-level privileges by impersonating another user or service?

Identity Spoofing

Token Manipulation

Impersonation Attack

Credential Theft

Which Windows feature allows users to run a program with the credentials of a different user?

Run as Administrator

User Account Control (UAC)

Task Manager

Run as Different User

What is the purpose of DLL search order hijacking?

To bypass antivirus detection

To escalate privileges

To execute malicious code within a legitimate process

To exploit vulnerabilities in network protocols

Which built-in group in Windows has no access rights and is intended for temporary or guest users?

Guests

Administrators

Users

Power Users

Which command can be used to view the current system uptime in Windows?

Netstat

Ipconfig

Tasklist

Systeminfo

What is the purpose of a DLL hijacking attack?

To gain unauthorized access to a system

To escalate privileges

To execute malicious code within a legitimate process

To bypass firewall restrictions

Which Windows feature allows users to run programs with limited privileges, reducing the risk of privilege escalation?

RDP uses port 3389 by default for remote desktop connections. 22. Which built-in group in Windows has limited access rights and is intended for users who should not have administrative privileges?

Users

Administrators

Guests

Power Users

Which command can be used to list all running processes on a Windows system?

Tasklist

Netstat

Ipconfig

Ping

Which type of privilege escalation involves gaining higher-level privileges by impersonating another user or service?

Identity Spoofing

Token Manipulation

Impersonation Attack

Credential Theft

Which Windows feature allows users to run a program with the credentials of a different user?

Run as Administrator

User Account Control (UAC)

Task Manager

Run as Different User

What is the purpose of DLL search order hijacking?

To bypass antivirus detection

To escalate privileges

To execute malicious code within a legitimate process

To exploit vulnerabilities in network protocols

Which built-in group in Windows has no access rights and is intended for temporary or guest users?

Guests

Administrators

Users

Power Users

Which command can be used to view the current system uptime in Windows?

Netstat

Ipconfig

Tasklist

Systeminfo

What is the purpose of a DLL hijacking attack?

To gain unauthorized access to a system

To escalate privileges

To execute malicious code within a legitimate process

To bypass firewall restrictions

Which Windows feature allows users to run programs with limited privileges, reducing the risk of privilege escalation?

RDP uses port 3389 by default for remote desktop connections. 32. Which built-in group in Windows has limited access rights and is intended for users who should not have administrative privileges?

Users

Administrators

Guests

Power Users

Which command can be used to list all running processes on a Windows system?

Tasklist

Netstat

Ipconfig

Ping

Windows Privilege Escalation

More Quizzes