On gaining access to the target system, an adversary can use the command-line interface to interact with the system, browse files, read and modify file content, create new accounts, connect to remote systems, and download and install malicious code.

On gaining access to the target system, an adversary can use the command-line interface to interact with the system, browse files, read and modify file content, create new accounts, connect to remote systems, and download and install malicious code.

• A. Use of PowerShell
• B. Use of Command-Line Interface
• C. Internal Reconnaissance
• D. HTTP User Agent

Answer: (B)

Focusing on post-access capabilities, using the command-line interface gives direct, scriptable control over the operating system, enabling actions like browsing files, reading and modifying content, creating new accounts, connecting to remote systems, and downloading and installing malicious code. This broad, hands-on control is what the scenario describes when an adversary gains access and starts operating on the host, making the command-line interface the best fit. PowerShell is a specific type of command-line interface on Windows, and while it could be used to perform these tasks, the scenario describes the general capability of interacting with the system via a CLI, not a particular shell. Internal reconnaissance involves information gathering rather than performing the range of actionable tasks listed. HTTP User Agent is a web request header and has no direct relevance to performing on-system actions after access.

Focusing on post-access capabilities, using the command-line interface gives direct, scriptable control over the operating system, enabling actions like browsing files, reading and modifying content, creating new accounts, connecting to remote systems, and downloading and installing malicious code. This broad, hands-on control is what the scenario describes when an adversary gains access and starts operating on the host, making the command-line interface the best fit.

PowerShell is a specific type of command-line interface on Windows, and while it could be used to perform these tasks, the scenario describes the general capability of interacting with the system via a CLI, not a particular shell. Internal reconnaissance involves information gathering rather than performing the range of actionable tasks listed. HTTP User Agent is a web request header and has no direct relevance to performing on-system actions after access.