Exam N10-008 topic 1 question 172 discussion

an attacker must install malware that opens a backdoor remote connection by using the default credentials.

The key difference here is an act of a compromise. Use of default credentials is not a compromise, whereas a dictionary attack (which could easily crack default credentials) is a compromise.

The two options that compromise Internet-connected devices and make them vulnerable to becoming part of a botnet are: B. Malware infection E. Use of default credentials Malware infection can infiltrate devices, granting unauthorized access to attackers, while the use of default credentials allows easy access for attackers to compromise devices. Both of these methods are commonly employed by cybercriminals to recruit devices into botnets for malicious activities such as Distributed Denial of Service (DDoS) attacks.

i think key words here are "what compromises". if a dictionary attack is successful they have access malware infection also = access. use of default credentials by themselves dont compromise, a threat actor would need to use a dictionary attack to compromise default credentials. BF

Easier to implement a password change over a login lockout that will probably be triggered by users far more than attacks, and would also have an impact on production. Both have left the system in a state where they could be compromised. MALWARE & DEFAULT PASSWORDS

Compromised Security = The unauthorized disclosure, modification, substitution, or use of sensitive data (e.g., keys, metadata, or other security-related information) or the unauthorized modification of a security-related system, device, or process in order to gain unauthorized access. https://csrc.nist.gov/glossary/term/compromise#:~:text=The%20unauthorized%20disclosure%2C%20modification%2C%20substitution,order%20to%20gain%20unauthorized%20access. A malware infection comes from allowing the install of a program you shouldn't have installed & now it's causing problems that were not prepared for by any sort of management. Dictionary attack is a compromise of security, because you used recognizable words rather than encrypted code.

Compromised Security = The unauthorized disclosure, modification, substitution, or use of sensitive data (e.g., keys, metadata, or other security-related information) or the unauthorized modification of a security-related system, device, or process in order to gain unauthorized access. https://csrc.nist.gov/glossary/term/compromise#:~:text=The%20unauthorized%20disclosure%2C%20modification%2C%20substitution,order%20to%20gain%20unauthorized%20access. A malware infection comes from allowing the install of a program you shouldn't have installed & now it's causing problems that were not prepared for by any sort of management. Dictionary attack is a compromise of security, because you used recognizable words rather than encrypted code.

I was thinking B,C. B. Malware is the prime reason pc will become a bot zombie. C. Ip Spoofing. Reflective DNS. Using multiple DNS servers with the victims spoofed IP to create a amplified DoS attack. A,D,E,F are ways attackers gain access to network/PC and plant malware.

GPT picks B and E: "The two options that compromise Internet-connected devices and make them vulnerable to becoming part of a botnet are: (B) Malware infection: Malicious software (malware) can infect devices, giving attackers control over them and potentially using them as part of a botnet for various malicious activities. (E) Use of default credentials: Many devices come with default usernames and passwords that users might not change. Attackers can exploit this by using default credentials to gain unauthorized access to devices and manipulate them for their purposes. The other options (A, C, D, F) are security-related concerns but are not directly linked to turning devices into botnet members."

Dictionary attack does not make sense for this

The two options that compromise Internet-connected devices and make them vulnerable to becoming part of a botnet are: Malware infection Use of default credentials

Two of the possible causes of Internet-connected devices becoming part of a botnet are malware infection and use of default credentials. Malware infection can happen when users unknowingly install malicious software on their devices that turns them into zombies controlled by a botmaster. Use of default credentials can allow attackers to easily access and compromise devices that have not changed their factory settings.

Amazing question and from an organization that also conducts security certification. I can use a vulnerability in many unique ways to create an attack. Now to dumb down my thinking to the pay-grade of certification question-creators: nope, my mind refuses

B. Malware infection E. Use of default credentials Explanation: Malware infection can compromise Internet-connected devices and make them vulnerable to becoming part of a botnet. Use of default credentials can also compromise devices and make them vulnerable to becoming part of a botnet.

The two options that compromise Internet-connected devices and make them vulnerable to becoming part of a botnet are: B. Malware infection: Malware is a type of software designed to harm or exploit any device that it infects. Malware can be used to gain unauthorized access to a device or network, steal sensitive information, or turn the device into a bot for use in a botnet. E. Use of default credentials: Many devices come with default login credentials that are well known and can be easily exploited by attackers. If these credentials are not changed, attackers can gain access to the device and install malware or use it as part of a botnet.

B. Malware infection E. Use of default credentials

Which of the following compromises Internet-connected devices and makes them vulnerable to becoming part of a botnet? Babyzilla is right: Compromises is the key word, so a dictionary atack and a malware would compromise.