200-201 Question 48
Single answerA security analyst is investigating a recent data breach where an attacker leveraged a software vulnerability to gain unauthorized access to sensitive data. The attacker used a pre-written script to exploit this vulnerability after discovering it in the organization's outdated web server. Which of the following best describes the type of exploit used by the attacker?
- A
Zero-day exploit
- B
Remote code execution (RCE) exploit
- C
Privilege escalation exploit
- D
Known vulnerability exploit
Show answer and explanation
Correct answer: D
Explanation
The attacker in the scenario exploited a known vulnerability in an outdated web server. A known vulnerability exploit takes advantage of publicly disclosed security flaws that have not been patched or mitigated. The key detail in the question is that the vulnerability was already known, ruling out options like zero-day exploits.
- A. Incorrect.
A zero-day exploit refers to an attack that targets a previously unknown vulnerability that hasn't been patched yet. In this case, the exploit targeted a known vulnerability in an outdated system, not a zero-day vulnerability.
- B. Incorrect.
A remote code execution (RCE) exploit allows attackers to run code on a remote system. While the scenario could involve RCE, the question emphasizes the use of a known vulnerability rather than the method of execution.
- C. Incorrect.
A privilege escalation exploit is used to gain higher-level access within a system. The scenario does not indicate that the attacker elevated privileges after gaining access but rather exploited a known vulnerability to access data.
- D. Correct.
A known vulnerability exploit refers to an attack leveraging a vulnerability that has already been discovered and disclosed, often due to outdated or unpatched systems. This matches the scenario described, where the attacker exploited a known issue in the web server.