A common method of privilege escalation is to use an exploit to create an account with more privileges than a regular user has. EDIT: why specify 3 instead of all that apply. Kinda gives it away. -- Removed answer three form list of correct answers. An increased amount of failed logon events only indicates, that someone tried to break it, but is not indication that the hacker has been successful in compromising the system.