SY0-501 · Question #441
When attackers use a compromised host as a platform for launching attacks deeper into a company's network, it is said that they are:
The correct answer is D. pivoting. Pivoting describes the technique where an attacker utilizes a compromised host within a network as a jumping-off point to access other systems deeper in the internal network that would otherwise be unreachable.
Question
When attackers use a compromised host as a platform for launching attacks deeper into a company's network, it is said that they are:
Options
- Aescalating privilege
- Bbecoming persistent
- Cfingerprinting
- Dpivoting
How the community answered
(13 responses)- B8% (1)
- C8% (1)
- D85% (11)
Why each option
Pivoting describes the technique where an attacker utilizes a compromised host within a network as a jumping-off point to access other systems deeper in the internal network that would otherwise be unreachable.
Escalating privilege refers to the act of gaining higher levels of access or permissions on a *single* compromised system, rather than using that system to attack *other* systems.
Becoming persistent means establishing a mechanism to maintain access to a compromised system over time, even after reboots or security changes, rather than using it as a launchpad for further attacks.
Fingerprinting is the process of gathering detailed information about a target system or network, such as operating system, open ports, and running services, typically performed *before* or during initial compromise, not *after* compromise to launch deeper attacks.
Pivoting, also known as island hopping, is a post-exploitation technique where an attacker uses a compromised system as an intermediary point to access other systems on a different network segment that is not directly accessible from the internet or the attacker's initial entry point. This allows the attacker to bypass network segmentation and firewall rules, effectively moving deeper into a company's internal network by routing traffic through the compromised host.
Concept tested: Post-exploitation network traversal (pivoting)
Source: https://attack.mitre.org/techniques/T1090/002/
Topics
Community Discussion
No community discussion yet for this question.