nerdexam
CompTIA

SY0-501 · Question #441

When attackers use a compromised host as a platform for launching attacks deeper into a company's network, it is said that they are:

The correct answer is D. pivoting. Pivoting describes the technique where an attacker utilizes a compromised host within a network as a jumping-off point to access other systems deeper in the internal network that would otherwise be unreachable.

Submitted by asante_acc· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

When attackers use a compromised host as a platform for launching attacks deeper into a company's network, it is said that they are:

Options

  • Aescalating privilege
  • Bbecoming persistent
  • Cfingerprinting
  • Dpivoting

How the community answered

(13 responses)
  • B
    8% (1)
  • C
    8% (1)
  • D
    85% (11)

Why each option

Pivoting describes the technique where an attacker utilizes a compromised host within a network as a jumping-off point to access other systems deeper in the internal network that would otherwise be unreachable.

Aescalating privilege

Escalating privilege refers to the act of gaining higher levels of access or permissions on a *single* compromised system, rather than using that system to attack *other* systems.

Bbecoming persistent

Becoming persistent means establishing a mechanism to maintain access to a compromised system over time, even after reboots or security changes, rather than using it as a launchpad for further attacks.

Cfingerprinting

Fingerprinting is the process of gathering detailed information about a target system or network, such as operating system, open ports, and running services, typically performed *before* or during initial compromise, not *after* compromise to launch deeper attacks.

DpivotingCorrect

Pivoting, also known as island hopping, is a post-exploitation technique where an attacker uses a compromised system as an intermediary point to access other systems on a different network segment that is not directly accessible from the internet or the attacker's initial entry point. This allows the attacker to bypass network segmentation and firewall rules, effectively moving deeper into a company's internal network by routing traffic through the compromised host.

Concept tested: Post-exploitation network traversal (pivoting)

Source: https://attack.mitre.org/techniques/T1090/002/

Topics

#pivoting#lateral movement#attack techniques#network compromise

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice