The following scenario is an example of privilege elevation; select the answer that implements the appropriate mitigation. Scenario: Credential Exploitation Valid single-factor credentials (1FA-username and password) allow a typical user to authenticate against a resource. However, obtaining the account's password becomes a hacking exercise if a threat actor knows the username. Often, a threat actor will first target a systems administrator since their credentials frequently allow access to sensitive data and systems directly. With a sysadmin's credentials and access, a cybercriminal can move laterally while arousing little or no suspicion since it is a trusted privileged account. Once a threat actor has compromised credentials, every privilege the account has is now fair game for the attacker. If the threat actor is detected, an organization typically resets passwords as a high priority and reimages infected systems to mitigate the threat (especially if it involves servers). However, requesting a password change alone does not always resolve the incident because the method of obtaining the credentials in the first place may involve other attack vectors, like malware or a compromised cell phone. This gives the threat actor a persistent presence until their infiltration is fully eradicated. Compromised credentials are the easiest privileged attack vector for a threat actor to achieve success. The accounts associated with credentials control almost every aspect of a modern information technology environment—from administrators to service accounts. Unfortunately, credential theft can be accomplished via password reuse attacks, memory-scraping malware, and innumerable other ways. O a. Use load balance technologies O b. Check the integrity of the messages exchanged during the transactions ◇ c. Implement strong access controls and privilege separation. d. Use a strong cryptosystem and keys Define the correct risk treatment strategy in the following scenario. Scenario: Evolving Power Grids and Cybersecurity Context: Electric power grids are critical infrastructure systems evolving rapidly to address climate change and incorporate renewable energy sources. These modern power grids rely heavily on automation, communications, and information technologies. Risk Assessment Horizon: The assessment looks ahead ten years until the early 2030s. Risk Identification: • Threats: Various cybersecurity threats emerge due to increased automation and connectivity. ⚫ Vulnerabilities: Weaknesses in communication networks, control systems, and software. • Likelihood: Medium. Impact: High vulnerability can lead to severe consequences (e.g., disruptions, data breaches). Transfer High Impact Medium O a. Avoid O b. Accept O c. Transfer O d. Reduce Avoid Reduce / Active Control Accept Low Reduce (if Cost Justifiable) Low Medium Likelihood High

The following scenario is an example of privilege elevation; select the answer that implements the appropriate mitigation. Scenario: Credential Exploitation Valid single-factor credentials (1FA-username and password) allow a typical user to authenticate against a resource. However, obtaining the account's password becomes a hacking exercise if a threat actor knows the username. Often, a threat actor will first target a systems administrator since their credentials frequently allow access to sensitive data and systems directly. With a sysadmin's credentials and access, a cybercriminal can move laterally while arousing little or no suspicion since it is a trusted privileged account. Once a threat actor has compromised credentials, every privilege the account has is now fair game for the attacker. If the threat actor is detected, an organization typically resets passwords as a high priority and reimages infected systems to mitigate the threat (especially if it involves servers). However, requesting a password change alone does not always resolve the incident because the method of obtaining the credentials in the first place may involve other attack vectors, like malware or a compromised cell phone. This gives the threat actor a persistent presence until their infiltration is fully eradicated. Compromised credentials are the easiest privileged attack vector for a threat actor to achieve success. The accounts associated with credentials control almost every aspect of a modern information technology environment—from administrators to service accounts. Unfortunately, credential theft can be accomplished via password reuse attacks, memory-scraping malware, and innumerable other ways. O a. Use load balance technologies O b. Check the integrity of the messages exchanged during the transactions ◇ c. Implement strong access controls and privilege separation. d. Use a strong cryptosystem and keys Define the correct risk treatment strategy in the following scenario. Scenario: Evolving Power Grids and Cybersecurity Context: Electric power grids are critical infrastructure systems evolving rapidly to address climate change and incorporate renewable energy sources. These modern power grids rely heavily on automation, communications, and information technologies. Risk Assessment Horizon: The assessment looks ahead ten years until the early 2030s. Risk Identification: • Threats: Various cybersecurity threats emerge due to increased automation and connectivity. ⚫ Vulnerabilities: Weaknesses in communication networks, control systems, and software. • Likelihood: Medium. Impact: High vulnerability can lead to severe consequences (e.g., disruptions, data breaches). Transfer High Impact Medium O a. Avoid O b. Accept O c. Transfer O d. Reduce Avoid Reduce / Active Control Accept Low Reduce (if Cost Justifiable) Low Medium Likelihood High