300-220 CBRTHD: Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity

Plink’s -R option creates remote SSH port forwarding, forming an SSH tunnel to the local RDP endpoint. sc.exe \\HFDC01 query queries service information on the named remote server, which is service enumeration. Microsoft documents that sc.exe query obtains and displays service information and that its server parameter identifies a remote server in UNC format.