Which of the following is a typical post-exploitation task?

• A. Port scanning and enumeration
• B. Initial access phishing
• C. Privilege escalation
• D. Vulnerability scanning

Answer: (C)

Expanding access and maintaining a foothold after an initial breach is a common goal in post-exploitation. Privilege escalation fits this scenario perfectly because once you have a foothold, the next step is often to gain higher privileges. With elevated rights, you can access sensitive data, move laterally to other systems, and install tools or backdoors more effectively, all while reducing the risk of detection because you operate under a legitimate or higher-privilege account.

The other activities align more with earlier stages: port scanning and enumeration are used to map targets and services before or during exploitation; phishing is a technique to achieve initial access; vulnerability scanning helps identify weaknesses to exploit during the initial or early stages of an engagement.