Which of the following are examples of privilege escalation? Each correct answer represents a complete solution. Choose two.

The correct answer is B. Juan logs in with his account, then takes over Anita's privileges C. John logs in as a standard user but uses a flaw in the system to get admin privilege. In both cases the user had some authentic access, but then got additional privileges they had not been authorized. Answer option C is incorrect. This is an example of SQL injection. Answer option D is incorrect. This is an example of password cracking.

Enterprise Security

Question

Options

AJohn uses SQL commands to login to a website he does not have authorization to
BJuan logs in with his account, then takes over Anita's privileges
CJohn logs in as a standard user but uses a flaw in the system to get admin privilege
DFred uses Ophcrack to get a Windows XP password

How the community answered

(57 responses)

A
9% (5)
B
75% (43)
D
16% (9)

Explanation

In both cases the user had some authentic access, but then got additional privileges they had not been authorized. Answer option C is incorrect. This is an example of SQL injection. Answer option D is incorrect. This is an example of password cracking.

Topics

#privilege escalation#access control#vulnerability exploitation#authorization bypass

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice