312-50V13 · Question #578
XYZ company recently discovered a potential vulnerability on their network, originating from misconfigurations. It was found that some of their host servers had enabled debugging functions and…
The correct answer is C. Unauthorized users may perform privilege escalation using unnecessarily created accounts. The most potent risk from unknown users having administrative permissions and enabled debugging functions is privilege escalation, allowing unauthorized users to gain elevated system control.
Question
Options
- AAn attacker may be able to inject a malicious DLL into the current running process
- BWeak encryption might be allowing man-in-the-middle attacks, leading to data tampering
- CUnauthorized users may perform privilege escalation using unnecessarily created accounts
- DAn attacker may carry out a Denial-of-Service assault draining the resources of the server in the
How the community answered
(26 responses)- A8% (2)
- B19% (5)
- C69% (18)
- D4% (1)
Why each option
The most potent risk from unknown users having administrative permissions and enabled debugging functions is privilege escalation, allowing unauthorized users to gain elevated system control.
While enabled debugging functions could potentially aid in finding vulnerabilities for DLL injection, the *most potent* risk from *granted administrative permissions to unknown users* is not DLL injection but direct privilege escalation.
The scenario describes enabled debugging functions and administrative permissions for unknown users, which does not directly imply weak encryption leading to man-in-the-middle attacks.
Granting administrative permissions to unknown users is a critical misconfiguration that directly allows an attacker (if they compromise one of these accounts or create a new one) to perform privilege escalation, gaining full control over the server and its resources. This is the most direct and potent risk from the described scenario.
While any misconfiguration can indirectly lead to a DoS, the specific misconfiguration of 'unknown users granted administrative permissions' most directly and potently leads to privilege escalation, not primarily DoS.
Concept tested: Impact of excessive permissions/misconfigurations
Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/delegation-of-administration
Topics
Community Discussion
No community discussion yet for this question.