nerdexam
CompTIA

CAS-003 · Question #277

Some mobile devices are jail-broken by connecting via USB cable and then exploiting software vulnerabilities to get kernel-level access. Which of the following attack types represents this scenario?…

The correct answer is D. Physical attack E. Privilege escalation. This scenario involves two distinct attack phases. First, D (Physical attack): the attacker requires direct physical access to the device via a USB cable - if physical access were not possible, the attack could not begin. Second, E (Privilege escalation): once connected, the…

Enterprise Security Operations

Question

Some mobile devices are jail-broken by connecting via USB cable and then exploiting software vulnerabilities to get kernel-level access. Which of the following attack types represents this scenario? (Select TWO).

Options

  • ASession management attack
  • BProtocol fuzzing
  • CRoot-kit compromise
  • DPhysical attack
  • EPrivilege escalation
  • FMan-in-the-middle

How the community answered

(33 responses)
  • A
    9% (3)
  • B
    3% (1)
  • D
    85% (28)
  • F
    3% (1)

Explanation

This scenario involves two distinct attack phases. First, D (Physical attack): the attacker requires direct physical access to the device via a USB cable - if physical access were not possible, the attack could not begin. Second, E (Privilege escalation): once connected, the attacker exploits software vulnerabilities to move from normal user-level permissions up to kernel-level (root) access - this is the definition of privilege escalation. The other options do not apply: session management attacks target web session tokens; protocol fuzzing sends malformed input to find protocol bugs; rootkits are a type of persistent malware installed after compromise (not the attack method itself); and MitM intercepts communications between two parties.

Topics

#mobile security#jailbreaking#privilege escalation#physical attack

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice