Practice · OffSec Defense Analyst

~/offsec-osda · offsec-osda_d1_5804a5ad3178 ▊

← OffSec Defense Analyst · practice sheet

offsec-osda_d1_5804a5ad3178 domain/d1 · medium single

During an OSDA exam, an analyst wants to gain a foothold on one of the machines in the simulated corporate network to confirm an attacker's persistence mechanism firsthand. According to the exam guide, is this permitted?

A Yes, exploiting the machines is allowed as long as it is documented
B No, the only intended access is through the provided ELK SIEM and its logs and events
C Yes, but only after using one of the 24 available reverts
D Yes, provided the analyst does not download any files from the machine

Unlock this exam to join the per-question discussion and vote on questions.

next question →