Which attack compromises a system running an RTOS?
Short answer
B Memory injection
Question
Key Takeaways
This question tests knowledge of embedded system vulnerabilities, specifically distinguishing RTOS-specific risks (like memory corruption) from general web or network attacks.
Memory injection is the primary technique used to compromise systems running a Real-Time Operating System (RTOS), as these embedded environments often lack robust memory protection. The community agrees that unlike web-based attacks like XSS, memory injection directly exploits the memory management of real-time processes.
Common mistake: Selecting Cross-site scripting (XSS) is a common error because test-takers associate 'compromise' with web attacks, but RTOS devices typically do not function as web browsers.
Expert Analysis
Why the Answer Is Correct
Memory injection is the correct answer because Real-Time Operating Systems (RTOS) are frequently deployed in embedded devices with limited memory protection. Attackers exploit these constraints by injecting malicious code into memory spaces to hijack processes or gain system control.
Why the Other Options Are Wrong
Cross-site scripting (A) is a client-side web attack requiring a browser, which is irrelevant for most headless RTOS devices. Replay attacks (C) target network protocols rather than the OS kernel, and Ransomware (D) is a payload rather than the specific compromise technique used against the RTOS architecture.
Community Comment Notes
The community highlights that RTOS environments prioritize timing and reliability, often running on IoT devices where memory injection is a known vulnerability. Users clarified that unlike XSS or replay attacks, memory injection directly targets the memory management of real-time systems.
Official Reference
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
This link opens the official vendor documentation in a new tab.
Exam Strategy
Focus on the operating system environment described in the question; when you see 'RTOS,' immediately discard web-based attacks like XSS and look for low-level, code-based exploits like buffer overflows or memory injection.
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
ProudFather 👍 4 Answered BMemory injection is a technique that can be used to compromise a system running a real-time operating system (RTOS). By injecting malicious code into the memory of a running process, an attacker can gain unauthorized access to the system and its resources.
-
Fourgehan 👍 2 Answered BReal-Time Operating Systems (RTOS) are designed to handle tasks with precise timing and reliability requirements. They often run on embedded systems, and like other systems, they are vulnerable to specific types of attacks
-
9149f41 👍 2 Answered BOnly memory injection often targets real-time or running systems (e.g., databases, IoT). Attacks like XXS, replay, or ransomware don’t require real-time operations and can work in any environment.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →