A scanner finds a public-facing municipal jump host with Remote Desktop exposed to the Internet and the vendor default administrator password still in use. Which combination of vectors does this primarily illustrate?
Select an answer to reveal the explanation.
Short Explanation
Open RDP on the Internet plus the factory admin password is the "open ports + default credentials" combo — an unlocked front door with the spare key still under the mat. Fix exposure and change defaults before inventing exotic race-condition theories. Jump hosts belong behind MFA and restricted access, not on the public Internet.
Full Explanation
Objective 2.2 highlights open service ports and default credentials as high-risk vectors when services are exposed. An Internet-reachable RDP jump host with unchanged defaults combines both. MSP supply-chain compromise, disinformation campaigns, and application race conditions are different threat or vulnerability categories. Municipal jump access should use hardened, authenticated pathways without public default credentials.