nerdexam
CompTIA

CAS-002 · Question #277

Some mobile devices are jail-broken by connecting via USB cable and then exploiting software vulnerabilities to get kernel-level access. Which of the following attack types represents this scenario?…

The correct answer is D. Physical attack E. Privilege escalation. Jailbreaking via USB requires physical device access and exploits vulnerabilities to achieve kernel-level rights, making it both a physical attack and a privilege escalation.

Enterprise Security

Question

Some mobile devices are jail-broken by connecting via USB cable and then exploiting software vulnerabilities to get kernel-level access. Which of the following attack types represents this scenario? (Select TWO).

Options

  • ASession management attack
  • BProtocol fuzzing
  • CRoot-kit compromise
  • DPhysical attack
  • EPrivilege escalation
  • FMan-in-the-middle

How the community answered

(33 responses)
  • A
    3% (1)
  • D
    91% (30)
  • F
    6% (2)

Why each option

Jailbreaking via USB requires physical device access and exploits vulnerabilities to achieve kernel-level rights, making it both a physical attack and a privilege escalation.

ASession management attack

Session management attacks target authenticated user sessions over a network, which has no relevance to a USB-connected local device exploitation scenario.

BProtocol fuzzing

Protocol fuzzing is a vulnerability discovery technique that sends malformed inputs to interfaces - it is a research method, not the attack vector used to achieve kernel access via USB.

CRoot-kit compromise

A rootkit is a stealthy persistence mechanism installed after access is gained - it describes malware behavior post-compromise, not the attack method used to obtain the initial kernel-level access.

DPhysical attackCorrect

Connecting via USB cable to initiate the exploit requires the attacker to have hands-on access to the device, which is the defining characteristic of a physical attack against an endpoint.

EPrivilege escalationCorrect

Using software vulnerabilities to move from user-space to kernel-level access is privilege escalation - the attacker bypasses normal OS access controls to obtain elevated rights not originally granted.

FMan-in-the-middle

Man-in-the-middle attacks intercept network traffic between two communicating parties - no network interception is involved in a direct USB-based local device exploit.

Concept tested: Physical attack and privilege escalation in mobile jailbreaking

Source: https://csrc.nist.gov/glossary/term/privilege_escalation

Topics

#mobile security#privilege escalation#physical attack#jailbreaking

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice