Which of the following best describes a server side exploit?

Attacking the physical machine describes a physical security attack, which is outside the scope of network-based exploit classification.

Attacking a service listening on a network port is the conventional industry definition of a server-side exploit, but is not the answer selected by this exam's answer key.

In this exam's taxonomy, a server-side exploit is characterized by its outcome on the server - specifically gaining elevated privilege such as root or administrator access. This reflects the scenario where a service running with high privileges is exploited, resulting in the attacker inheriting those elevated permissions on the operating system rather than merely accessing a port.

Attacking a client application that retrieves content from the network is the definition of a client-side exploit, the opposite category.