SY0-501 · Question #425
Which of the following specifically describes the exploitation of an interactive process to access otherwise restricted areas of the OS?
The correct answer is D. Privilege escalation. The exploitation of an interactive process to gain higher access to restricted operating system areas is specifically defined as privilege escalation.
Question
Which of the following specifically describes the exploitation of an interactive process to access otherwise restricted areas of the OS?
Options
- APivoting
- BProcess affinity
- CBuffer overflow
- DPrivilege escalation
How the community answered
(61 responses)- A3% (2)
- B13% (8)
- C5% (3)
- D79% (48)
Why each option
The exploitation of an interactive process to gain higher access to restricted operating system areas is specifically defined as privilege escalation.
Pivoting is a post-exploitation technique used to access other systems on a network that are otherwise unreachable from the attacker's original position, not primarily about gaining higher privileges on the currently compromised system.
Process affinity is a scheduler property that binds a process or thread to a specific CPU or set of CPUs to optimize performance, and is unrelated to security exploitation or access control.
A buffer overflow is a specific type of vulnerability where a program attempts to write data beyond the allocated buffer, which can be a *method* used to achieve privilege escalation, but it is not the overarching description of accessing restricted areas via exploitation.
Privilege escalation is a type of attack where an attacker exploits a vulnerability in an application, service, or the operating system itself to gain elevated access rights, such as moving from a standard user to an administrator or system-level account. This allows the attacker to access otherwise restricted areas of the OS that were previously inaccessible, directly matching the scenario described.
Concept tested: Understanding of privilege escalation attacks
Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-soc-2-privilege-escalation
Topics
Community Discussion
No community discussion yet for this question.