Which attack compromises a system running an RTOS?

Which of the following can be used to compromise a system that is running an RTOS?

  1. Cross-site scripting
  2. Memory injection Source Reference Answer
  3. Replay attack
  4. Ransomware

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

This question tests knowledge of embedded system vulnerabilities, specifically distinguishing RTOS-specific risks (like memory corruption) from general web or network attacks.

Memory injection is the primary technique used to compromise systems running a Real-Time Operating System (RTOS), as these embedded environments often lack robust memory protection. The community agrees that unlike web-based attacks like XSS, memory injection directly exploits the memory management of real-time processes.

Selecting Cross-site scripting (XSS) is a common error because test-takers associate 'compromise' with web attacks, but RTOS devices typically do not function as web browsers.

Community Discussion (3 comments)

9149f41 👍 2 Selected: B
Only memory injection often targets real-time or running systems (e.g., databases, IoT). Attacks like XXS, replay, or ransomware don’t require real-time operations and can work in any environment.
ProudFather 👍 4 Selected: B
Memory injection is a technique that can be used to compromise a system running a real-time operating system (RTOS). By injecting malicious code into the memory of a running process, an attacker can gain unauthorized access to the system and its resources.
Fourgehan 👍 2 Selected: B
Real-Time Operating Systems (RTOS) are designed to handle tasks with precise timing and reliability requirements. They often run on embedded systems, and like other systems, they are vulnerable to specific types of attacks

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Memory injection is the correct answer because Real-Time Operating Systems (RTOS) are frequently deployed in embedded devices with limited memory protection. Attackers exploit these constraints by injecting malicious code into memory spaces to hijack processes or gain system control.

Why the Other Options Are Wrong

Cross-site scripting (A) is a client-side web attack requiring a browser, which is irrelevant for most headless RTOS devices. Replay attacks (C) target network protocols rather than the OS kernel, and Ransomware (D) is a payload rather than the specific compromise technique used against the RTOS architecture.

Community Comment Notes

The community highlights that RTOS environments prioritize timing and reliability, often running on IoT devices where memory injection is a known vulnerability. Users clarified that unlike XSS or replay attacks, memory injection directly targets the memory management of real-time systems.

Official Reference

Exam Strategy

Focus on the operating system environment described in the question; when you see 'RTOS,' immediately discard web-based attacks like XSS and look for low-level, code-based exploits like buffer overflows or memory injection.

Related Analysis

A company allows customers to upload PDF documents to its pu

A-Grade

A security administrator is reissuing a former employee's la

S-Grade

A client demands at least 99.99% uptime from a service provi

A-Grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide