ITPEC FE Morning April 2021 Question 36
Which of the following is installed into an in-house network or server by an intruder to enter through an access path other than the normal path?
Explanation
Backdoor — a hidden entry that an intruder installs to get back in without passing the normal access path.
After breaking into a system, an attacker often plants a backdoor, for example a program listening on a hidden port or an extra account, so that later access skips authentication and logging. Removing the original vulnerability does not close it, which is why a compromised server is usually rebuilt rather than patched.
Answer (a)
Why not others:
- •(b) Forensic — the collection and analysis of evidence after an incident, a defensive activity
- •(c) Strict routing — an IP option in which the sender lists the exact route a packet must follow
- •(d) Thin client agent — legitimate software that connects a thin client terminal to its server
Key rule: A backdoor is about persistence: it gives an attacker a way back in after the first break-in, bypassing the normal controls.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.