Question 42:
A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function. Which of the following OS or filesystem mechanisms is MOST likely to support this objective?
Answer options:
A. Alternate data streams B. PowerShell modules C. MP4 steganography D. PsExec