Fundamentals of InfoSecintermediate
An attacker gains permissions beyond those originally assigned to an account. Which impact best describes this?
Answer
Elevation of privilege
Explanation
### Why this is right
Elevation of privilege occurs when an attacker acquires authorization permissions beyond those initially granted. It can be vertical or horizontal, according to the material.
### The concept
The key issue is the change in the attacker's permission level. Information disclosure concerns release of protected information, interception is unauthorized viewing, and repudiation is denial of participation.
### The other options
- **Information disclosure**: release of information that should not be public.
- **Interception**: unauthorized viewing of data.
- **Repudiation**: denying participation in an action.
### Terms
- **Privilege**: a permission or authority to perform an action.
- **Elevation of privilege**: gaining permissions beyond those assigned.
### Remember
When permissions increase improperly, identify an elevation of privilege.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free