While Performing Privilege Escalation on a Windows 7 Workstation, a Penetration

Multiple Choice

While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path. To exploit this vulnerability, which of the following criteria must be met?

A) Permissions not disabled in the DLL
B) Weak folder permissions of a directory in the DLL search path
C) Write permissions in the C:\Windows\System32\imports directory
D) DLL not cryptographically signed by the vendor