CAS-001 · Question #400
Some mobile devices are jail-broken by connecting via USB cable and then exploiting software vulnerabilities to get kernel-level access. Which of the following attack types represents this scenario?…
The correct answer is D. Physical attack E. Privilege escalation. Physical attack (D) applies because the attacker requires direct physical access to the device-specifically connecting a USB cable-to initiate the jailbreak. Without that physical access, the attack cannot begin. Privilege escalation (E) applies because the exploit elevates the…
Question
Some mobile devices are jail-broken by connecting via USB cable and then exploiting software vulnerabilities to get kernel-level access. Which of the following attack types represents this scenario? (Select TWO).
Options
- ASession management attack
- BProtocol fuzzing
- CRoot-kit compromise
- DPhysical attack
- EPrivilege escalation
- FMan-in-the-middle
How the community answered
(36 responses)- A3% (1)
- B11% (4)
- C6% (2)
- D81% (29)
Explanation
Physical attack (D) applies because the attacker requires direct physical access to the device-specifically connecting a USB cable-to initiate the jailbreak. Without that physical access, the attack cannot begin. Privilege escalation (E) applies because the exploit elevates the attacker's permissions from a limited user context to kernel-level (root) access, which is the definition of privilege escalation. Session management attack (A) concerns hijacking authenticated sessions. Protocol fuzzing (B) involves sending malformed data to discover vulnerabilities in protocols. Rootkit compromise (C) describes malware that hides itself after gaining access, not the method of gaining access. Man-in-the-middle (F) intercepts communication between two parties. Neither A, B, C, nor F accurately describes the USB-physical + kernel-escalation scenario.
Topics
Community Discussion
No community discussion yet for this question.