nerdexam
EC-Council

312-50V13 · Question #578

XYZ company recently discovered a potential vulnerability on their network, originating from misconfigurations. It was found that some of their host servers had enabled debugging functions and…

The correct answer is C. Unauthorized users may perform privilege escalation using unnecessarily created accounts. The most potent risk from unknown users having administrative permissions and enabled debugging functions is privilege escalation, allowing unauthorized users to gain elevated system control.

Submitted by rohit_dlh· Mar 6, 2026Vulnerability Analysis

Question

XYZ company recently discovered a potential vulnerability on their network, originating from misconfigurations. It was found that some of their host servers had enabled debugging functions and unknown users were granted administrative permissions. As a Certified Ethical Hacker, what would be the most potent risk associated with this misconfiguration?

Options

  • AAn attacker may be able to inject a malicious DLL into the current running process
  • BWeak encryption might be allowing man-in-the-middle attacks, leading to data tampering
  • CUnauthorized users may perform privilege escalation using unnecessarily created accounts
  • DAn attacker may carry out a Denial-of-Service assault draining the resources of the server in the

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    19% (5)
  • C
    69% (18)
  • D
    4% (1)

Why each option

The most potent risk from unknown users having administrative permissions and enabled debugging functions is privilege escalation, allowing unauthorized users to gain elevated system control.

AAn attacker may be able to inject a malicious DLL into the current running process

While enabled debugging functions could potentially aid in finding vulnerabilities for DLL injection, the *most potent* risk from *granted administrative permissions to unknown users* is not DLL injection but direct privilege escalation.

BWeak encryption might be allowing man-in-the-middle attacks, leading to data tampering

The scenario describes enabled debugging functions and administrative permissions for unknown users, which does not directly imply weak encryption leading to man-in-the-middle attacks.

CUnauthorized users may perform privilege escalation using unnecessarily created accountsCorrect

Granting administrative permissions to unknown users is a critical misconfiguration that directly allows an attacker (if they compromise one of these accounts or create a new one) to perform privilege escalation, gaining full control over the server and its resources. This is the most direct and potent risk from the described scenario.

DAn attacker may carry out a Denial-of-Service assault draining the resources of the server in the

While any misconfiguration can indirectly lead to a DoS, the specific misconfiguration of 'unknown users granted administrative permissions' most directly and potently leads to privilege escalation, not primarily DoS.

Concept tested: Impact of excessive permissions/misconfigurations

Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/delegation-of-administration

Topics

#Misconfiguration#Privilege escalation#Administrative permissions#Vulnerability assessment

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice