Exam 312-50v13 topic 1 question 140 discussion

The primary risk associated with misconfigurations—such as enabling debugging functions and granting administrative permissions to unknown users—is that unauthorized users could escalate their privileges.

For me, correct is A: Question states: “host servers had enabled debugging functions and unknown users were granted administrative permissions” – this already happened and they are asking what can be next. --> Debugging & Admin privileges together implies that you can perform DLL injection into any process. Debugging function is a standard way how to do it but you need also administrative rights. Incorrect: B) – weak encryption has nothing to do with this... C) – privilege escalation using unnecessarily created accounts – question states that the users were granted admin permissions already so they don’t have to escalate anything. D) – DoS attack by exhausting resources... you can do it even without admin privileges and debugging if you have any access.

Misconfigurations, such as debugging functions enabled and unknown users having administrative privileges, present a high risk of privilege escalation. Attackers with unauthorized admin-level access can exploit these misconfigurations to elevate their privileges and gain full control over affected systems.