Exam 350-201 topic 1 question 31 discussion

Spoofing attack - Changing configuration settings Broken authentication attack - Developing new code Injection attack - Implementing a new application Man in the middle attack - Installing network devices Privilege escalation attack - Developing new code Default credential attack - Changing configuration settings Note: The matching is based on the understanding that the threats listed are related to potential causes of the attacks rather than the targets of the attacks themselves. - ChatGPT

Default Credentials Adversaries may leverage manufacturer or supplier set default credentials on control system devices. These default credentials may have administrative permissions and may be necessary for initial configuration of the device. It is general best practice to change the passwords for these accounts as soon as possible, but some manufacturers may have devices that have passwords or usernames that cannot be changed. [1] Default credentials are normally documented in an instruction manual that is either packaged with the device, published online through official means, or published online through unofficial means. Adversaries may leverage default credentials that have not been properly modified or disabled.

Man-in-the-middle – Installing network device Injection attack – developing new code Default credential attack - Implementing a new application Privilege escalation attack - changing configuration settings. rely on below. https://attack.mitre.org/techniques/T0812/ - Defaul credential attack - Changing configuration settings , where Adversaries may leverage manufacturer or supplier set default credentials on control system devices. These default credentials may have administrative permissions and may be necessary for initial configuration of the device https://attack.mitre.org/tactics/TA0111/ - Privilege escalation attack

https://attack.mitre.org/tactics/TA0111/

3. Default credential attack - Implementing new application 4. Privilege escalation attack - Changing configuration settings