An Attacker Has Obtained the User ID and Password of a Datacenter's

question 522

Multiple Choice

An attacker has obtained the user ID and password of a datacenter's backup operator and has gained access to a production system. Which of the following would be the attacker's NEXT action?

• A) Perform a passive reconnaissance of the network.
• B) Initiate a confidential data exfiltration process.
• C) Look for known vulnerabilities to escalate privileges.
• D) Create an alternate user ID to maintain persistent access.

---

Definitions:

Motion To Dismiss

In a civil case, a request by the defendant that asks a judge or a court to dismiss the case because even if all the allegations are true, the plaintiff is not entitled to any legal relief. Also called demurrer.

Lead Paint

A type of paint that contains lead, a heavy metal, which can be toxic when ingested or inhaled, especially harmful to children.

Identical Product

A product that is exactly the same in every characteristic and feature as another product.

Sophisticated-User

A legal defense that releases a manufacturer from liability if the user of their product is deemed to have sufficient expertise to appreciate the risks associated with the product's use.