An attacker uses a guest account to exploit a weakness that enables the attacker to change access rights and alter user account information. Which type of attack is described?

In an elevation of privilege attack, a user gains higher access rights than intended, often exploiting system vulnerabilities. In this case, the attacker is leveraging a guest account to gain unauthorized control over user accounts, making this choice the correct answer.

Packet tampering involves intercepting and modifying data packets during transmission over a network. This type of attack focuses on data integrity rather than altering user account information or access rights. Since the scenario describes a modification of user settings rather than data in transit, this choice is not applicable.

Spoofing refers to impersonating another user or device to gain unauthorized access or information. While the attacker may be using a guest account, the act of changing access rights does not solely rely on impersonation, but rather on exploiting a system vulnerability. Thus, this option does not accurately describe the nature of the attack.