Advanced Ethical Hacking Masterclass Practice Test 2026 | Ex

During a black-box penetration test, you have gained initial access to a Windows domain-joined workstation. Before attempting to move laterally, which technique is most critical for discovering accessible network services and potential attack paths without triggering common network intrusion detection systems?

You have compromised a web server that is part of a multi-tier application architecture. The server has outbound Internet access but is otherwise in a restricted network segment. Which technique is most effective for establishing a reliable command and control (C2) channel to pivot into the internal network?

When attempting to evade an Application Whitelisting solution like AppLocker on a Windows target, which method would be considered an "advanced" technique that leverages native Windows utilities and living-off-the-land binaries (LOLBins)?