100-160: CCST Cybersecurity

By Cisco · Question Mode

QuestionQ25

Endpoint Security Concepts

A security analyst determines that a hacker gained root access to an enterprise Linux server. The hacker accessed the server as a guest, used a program to bypass the root password, and then, as the root user, killed essential server processes.

What type of endpoint attack is this?

Explanation

Privilege escalation occurs when an attacker obtains permissions beyond their originally authorized level, such as moving from guest access to root access on a Linux server. Root-level process termination is possible because of those elevated privileges.

Community Discussion

No comments yet. Be the first to start the discussion!