Explain the concept of privilege escalation.

• A. Gaining higher access level than originally granted, such as from user to administrator, by exploiting misconfigs or vulnerabilities.
• B. Reducing privileges to limit damage.
• C. Escalating network bandwidth.
• D. Adding new users without approval.

Answer: (A)

Privilege escalation means gaining a higher level of access than what you were originally granted, so you can perform actions that require greater rights. It happens after an initial foothold or login, when an attacker or tester finds a weakness—such as a misconfigured permission, a vulnerable service, or a weakly protected credential—that allows code or a process to run with elevated privileges like administrator or root. The goal is to move from a lower-privilege context to a higher one, enabling access to restricted data, system settings, or protected operations that ordinary users cannot perform. This concept is central to many attack paths and to defenses that enforce least privilege, monitor for unusual privilege changes, and patch vulnerabilities to prevent exploitation.

Other options don’t capture the idea of increasing access rights. Reducing privileges is a defensive or containment action, not escalation. Escalating network bandwidth isn’t about user permissions. Adding new users without approval is a different activity and may lead to broader access, but it doesn’t define the core idea of increasing the privilege level of an existing account.