CAS-003 · Question #277
Some mobile devices are jail-broken by connecting via USB cable and then exploiting software vulnerabilities to get kernel-level access. Which of the following attack types represents this scenario?…
The correct answer is D. Physical attack E. Privilege escalation. This scenario involves two distinct attack phases. First, D (Physical attack): the attacker requires direct physical access to the device via a USB cable - if physical access were not possible, the attack could not begin. Second, E (Privilege escalation): once connected, the…
Question
Some mobile devices are jail-broken by connecting via USB cable and then exploiting software vulnerabilities to get kernel-level access. Which of the following attack types represents this scenario? (Select TWO).
Options
- ASession management attack
- BProtocol fuzzing
- CRoot-kit compromise
- DPhysical attack
- EPrivilege escalation
- FMan-in-the-middle
How the community answered
(33 responses)- A9% (3)
- B3% (1)
- D85% (28)
- F3% (1)
Explanation
This scenario involves two distinct attack phases. First, D (Physical attack): the attacker requires direct physical access to the device via a USB cable - if physical access were not possible, the attack could not begin. Second, E (Privilege escalation): once connected, the attacker exploits software vulnerabilities to move from normal user-level permissions up to kernel-level (root) access - this is the definition of privilege escalation. The other options do not apply: session management attacks target web session tokens; protocol fuzzing sends malformed input to find protocol bugs; rootkits are a type of persistent malware installed after compromise (not the attack method itself); and MitM intercepts communications between two parties.
Topics
Community Discussion
No community discussion yet for this question.