nerdexam
GIAC

GCIH · Question #226

Which of the following is a method of gaining access to a system that bypasses normal authentication?

The correct answer is C. Back door. A back door is a covert mechanism that allows access to a system while bypassing normal authentication controls. The other options describe different types of attacks unrelated to authentication bypass.

Vulnerability Exploitation & Privilege Escalation

Question

Which of the following is a method of gaining access to a system that bypasses normal authentication?

Options

  • ATeardrop
  • BTrojan horse
  • CBack door
  • DSmurf

How the community answered

(45 responses)
  • A
    7% (3)
  • B
    4% (2)
  • C
    87% (39)
  • D
    2% (1)

Why each option

A back door is a covert mechanism that allows access to a system while bypassing normal authentication controls. The other options describe different types of attacks unrelated to authentication bypass.

ATeardrop

Teardrop is a denial-of-service attack that sends malformed, overlapping IP fragments to crash or destabilize the target system - it does not bypass authentication.

BTrojan horse

A Trojan horse is malware disguised as legitimate software to trick users into executing it - it does not itself bypass authentication mechanisms.

CBack doorCorrect

A back door is a hidden entry point intentionally or maliciously placed in a system that circumvents standard login and authentication procedures. Unlike other attack types, its defining characteristic is allowing unauthorized access without triggering normal credential checks. It may be installed by an attacker after initial compromise or embedded by a malicious insider.

DSmurf

Smurf is an ICMP-based distributed denial-of-service amplification attack that floods a victim with traffic - it has no authentication bypass capability.

Concept tested: Back door authentication bypass attack type

Source: https://csrc.nist.gov/glossary/term/backdoor

Topics

#backdoor#authentication bypass#persistence#unauthorized access

Community Discussion

No community discussion yet for this question.

Full GCIH Practice