Which of the following is an example of vertical privilege escalation?

Which of the following is an example of vertical privilege escalation?

• A. Gaining guest access to a system
• B. Impersonating an employee
• C. Gaining administrator rights
• D. Accessing a public database

Answer: (C)

Vertical privilege escalation occurs when a user gains a higher level of permissions than they are normally authorized to have within a system. This often involves a regular user obtaining elevated privileges, allowing them to perform actions that are typically reserved for more privileged accounts, such as administrators. The example of gaining administrator rights directly illustrates this concept, as it represents a user moving from a lower privilege level to a significantly higher one. Such actions can lead to unauthorized access to sensitive data and the ability to modify system configurations, which can compromise the security and integrity of the entire system. In contrast, gaining guest access does not reflect an escalation of privileges; it simply means the user has access at a very basic level. Impersonating an employee, while a form of unauthorized access, does not necessarily indicate an elevation of privilege unless it involves acquiring access to a higher-level account. Accessing a public database typically involves no privileges since it is designed for open access. Thus, these do not represent vertical privilege escalation.

Vertical privilege escalation occurs when a user gains a higher level of permissions than they are normally authorized to have within a system. This often involves a regular user obtaining elevated privileges, allowing them to perform actions that are typically reserved for more privileged accounts, such as administrators.

The example of gaining administrator rights directly illustrates this concept, as it represents a user moving from a lower privilege level to a significantly higher one. Such actions can lead to unauthorized access to sensitive data and the ability to modify system configurations, which can compromise the security and integrity of the entire system.

In contrast, gaining guest access does not reflect an escalation of privileges; it simply means the user has access at a very basic level. Impersonating an employee, while a form of unauthorized access, does not necessarily indicate an elevation of privilege unless it involves acquiring access to a higher-level account. Accessing a public database typically involves no privileges since it is designed for open access. Thus, these do not represent vertical privilege escalation.