Which term refers to registers rogue domain controllers to push changes into Active Directory?

• A. DCSync
• B. DCShadow
• C. EternalBlue
• D. Code Injection

Answer: (B)

Registering rogue domain controllers to push changes into Active Directory relies on how AD replication works. DCShadow is the technique that does this: it creates an unauthorized domain controller inside the domain and uses the normal replication process to propagate changes from that rogue DC to all other DCs. Because replication is a trusted, standard mechanism in AD, changes pushed through this fake DC can appear legitimate, enabling manipulation such as adding or modifying accounts and privileges across the environment.

DCSync, on the other hand, involves querying a legitimate domain controller to pull sensitive data like password hashes via replication, not pushing changes or introducing a new DC. EternalBlue is an SMB vulnerability exploit used for lateral movement, not AD replication. Code Injection is a general technique for injecting code, not specific to pushing changes through AD replication.