A penetration tester has successfully accessed a web server using an exploit in the user-agent string for Apache Struts. The tester then brute forces a credential that provides access to the back-end database server in a different subnet. This is an example of:
A . persistence
B . pivoting
C . escalation of privilege
D . a remote access Trojan
Answer: B