A.Extracting password hashes from Active Directory

B.Changing Group Policy Objects

C.Synchronizing changes between domain controllers

D.Modifying user access permissions

A.Using a well-known sender's email address

B.Sending the email to as many recipients as possible within the organization

C.Crafting the email to appear as a legitimate and urgent request

D.Attaching a large file to avoid detection

A.Exploiting unpatched vulnerabilities

B.Social engineering

C.Privilege escalation

D.SQL injection

A.Test the effectiveness of detection and response capabilities

B.Identify vulnerabilities in the security posture

C.Improve the coffee machine efficiency in the IT department

D.Validate security controls and mitigation strategies

A.To generate and deliver payloads for initial exploitation

B.To exploit web application vulnerabilities

C.To test firewall configurations

D.To automate network scanning