nerdexam
CompTIA

SY0-501 · Question #402

Which of the following BEST describes a network-based attack that can allow an attacker to take full control of a vulnerable host?

The correct answer is A. Remote exploit. A remote exploit is a network-based attack that targets vulnerabilities in a host's software or services, allowing an attacker to gain unauthorized and often full control of the system.

Submitted by rohit_dlh· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

Which of the following BEST describes a network-based attack that can allow an attacker to take full control of a vulnerable host?

Options

  • ARemote exploit
  • BAmplification
  • CSniffing
  • DMan-in-the-middle

How the community answered

(47 responses)
  • A
    74% (35)
  • B
    6% (3)
  • C
    4% (2)
  • D
    15% (7)

Why each option

A remote exploit is a network-based attack that targets vulnerabilities in a host's software or services, allowing an attacker to gain unauthorized and often full control of the system.

ARemote exploitCorrect

A remote exploit specifically leverages a security flaw in a network-accessible service or application on a target host to execute arbitrary code or gain a command shell. This typically grants the attacker elevated privileges or full administrative control over the compromised system, fulfilling the criteria of taking full control of a vulnerable host over a network.

BAmplification

Amplification attacks are a type of Denial-of-Service (DoS) attack where an attacker uses legitimate services to magnify traffic volume directed at a victim, aiming to overwhelm rather than gain control of a host.

CSniffing

Sniffing is a passive reconnaissance technique involving the capture and analysis of network traffic, primarily for information gathering, not for gaining control over a host.

DMan-in-the-middle

A Man-in-the-Middle (MITM) attack involves an attacker intercepting and potentially altering communication between two parties, but it does not inherently provide full control over the endpoint hosts themselves.

Concept tested: Network attack types and exploit mechanisms

Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-soc2-cyberattack-guide#common-types-of-cyberattacks

Topics

#remote exploit#network-based attack#vulnerability exploitation#attack types

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice