Which of the actions should the penetration tester use to maintain persistence to the device?

A penetration tester has gained access to a marketing employee’s device. The penetration tester wants to ensure that if the access is discovered, control of the device can be regained.

Which of the actions should the penetration tester use to maintain persistence to the device? (Select TWO)
A . Place an entry in HKLMSoftware MicrosoftCurrentVersionRun to call au57d.ps1.
B . Place an entry in C:windowssystem32driversetchosts for 12.17.20.10 badcomptia.com
C . Place a script in C:users%usernamelocalappdataroamingtemplau57d.ps1
D . Create a fake service in Windows called RTAudio to execute manually
E . Place an entry for RTAudio in HKLMCurrentControlSetServicesRTAudio.
F . Create a schedule task to call C:wwindowssystem32driversetchosts

View Answer

Answer: AB