What does "privilege escalation" typically involve?

• A. Accessing public information
• B. Gaining elevated access to resources
• C. Reducing user privileges for security reasons
• D. Using encryption to protect data

Answer: (B)

Privilege escalation typically involves gaining elevated access to resources that are normally protected from the user. This process can occur when a user who has a low level of access rights exploits a vulnerability in a system to increase those rights, thereby allowing them to perform actions that they normally would not be authorized to do. This can lead to unauthorized access to sensitive information, manipulation of data, or control over system functionalities that were intended to be restricted.

The concept revolves around two main types of privilege escalation: vertical and horizontal. Vertical escalation allows a user to acquire higher privileges, such as a standard user gaining administrative access. Horizontal escalation, on the other hand, involves accessing other users' resources with equivalent privileges. In either case, the primary objective is the unauthorized elevation of user rights, making this choice aligned perfectly with the definition of privilege escalation.