SY0-501 · Question #402
Which of the following BEST describes a network-based attack that can allow an attacker to take full control of a vulnerable host?
The correct answer is A. Remote exploit. A remote exploit is a network-based attack that targets vulnerabilities in a host's software or services, allowing an attacker to gain unauthorized and often full control of the system.
Question
Which of the following BEST describes a network-based attack that can allow an attacker to take full control of a vulnerable host?
Options
- ARemote exploit
- BAmplification
- CSniffing
- DMan-in-the-middle
How the community answered
(47 responses)- A74% (35)
- B6% (3)
- C4% (2)
- D15% (7)
Why each option
A remote exploit is a network-based attack that targets vulnerabilities in a host's software or services, allowing an attacker to gain unauthorized and often full control of the system.
A remote exploit specifically leverages a security flaw in a network-accessible service or application on a target host to execute arbitrary code or gain a command shell. This typically grants the attacker elevated privileges or full administrative control over the compromised system, fulfilling the criteria of taking full control of a vulnerable host over a network.
Amplification attacks are a type of Denial-of-Service (DoS) attack where an attacker uses legitimate services to magnify traffic volume directed at a victim, aiming to overwhelm rather than gain control of a host.
Sniffing is a passive reconnaissance technique involving the capture and analysis of network traffic, primarily for information gathering, not for gaining control over a host.
A Man-in-the-Middle (MITM) attack involves an attacker intercepting and potentially altering communication between two parties, but it does not inherently provide full control over the endpoint hosts themselves.
Concept tested: Network attack types and exploit mechanisms
Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-soc2-cyberattack-guide#common-types-of-cyberattacks
Topics
Community Discussion
No community discussion yet for this question.