During the Exploitation Phase of a Penetration Test, a Vulnerability

question 125

Multiple Choice

During the exploitation phase of a penetration test, a vulnerability is discovered that allows command execution on a Linux web server. A cursory review confirms the system access is only in a low-privilege user context: www-data . After reviewing, the following output from /etc/sudoers: Which of the following users should be targeted for privilege escalation?

• A) Only members of the Linux admin group, OPERATORS, ADMINS, jedwards, and operator can execute privileged commands useful for privilege escalation.
• B) All users on the machine can execute privileged commands useful for privilege escalation.
• C) Bfranks, emann, members of the Linux admin group, OPERATORS, and ADMINS can execute commands useful for privilege escalation.
• D) Jedwards, operator, bfranks, emann, OPERATOR, and ADMINS can execute commands useful for privilege escalation.

---

Definitions:

Assessment

The systematic evaluation and measurement of psychological, biological, and social factors in an individual or group.

Testing

The process of administering assessments to evaluate skills, knowledge, abilities, or performance in various areas.

Records And Documentation

Written materials and other evidence, including electronic and paper formats, that provide a record of activities, transactions, and decisions.

Psychopathology

The examination of psychological disorders, encompassing their signs, origins, and therapeutic methods.