Attackers scan a forgotten facilities camera server and find RDP listening on the internet. What is the attack surface?
Select an answer to reveal the explanation.
Short Explanation
That leftover camera box is sitting on the internet with RDP wide open—like leaving the loading-dock keypad on a public sidewalk. The attack surface is the exposed management interface. Mail rules and USB drops are different doors.
Full Explanation
Internet-facing RDP on a forgotten facilities camera server is an exposed remote-desktop management interface. Mailbox forwarding, web injection, and removable media are other vectors with different artifacts. Scanning evidence against that listener identifies the attack surface the civic SOC must close.