CompTIA PenTest+ (PT0-001) — Question 63

Which of the following is the reason why a penetration tester would run the chkconfig --del servicename command at the end of an engagement?

Answer options

• A. To remove the persistence
• B. To enable persistence
• C. To report persistence
• D. To check for persistence

Correct answer: A

Explanation

The correct answer is A, as the chkconfig --del servicename command is used to remove service configurations that allow for persistence after testing. Options B, C, and D are incorrect because they suggest actions related to enabling, reporting, or checking for persistence, which are not the goals of this command.