As an IT security technician conducting awareness training, match each social engineering attack vector or threat type to its corresponding security incident description.
- Dumpster DivingSearching through unsecure physical waste receptacles or recycling bins to locate printed credential lists, network maps, or corporate directories.
- Shoulder SurfingDirectly viewing a user's display monitor or keypad from an undisclosed vantage point to capture confidential data or passwords.
- TyposquattingRegistering a domain name with subtle misspellings of a legitimate corporate website to redirect users to a malicious credential-harvesting portal.
- Evil TwinConfiguring a rogue wireless access point with identical network identifiers (SSID) and security settings to eavesdrop on user traffic.
Answer
Dumpster Diving corresponds to searching physical waste receptacles for printed documents. Shoulder Surfing corresponds to viewing a user's monitor or keypad to capture credentials. Typosquatting corresponds to registering misspelled domain names to redirect users to malicious portals. Evil Twin corresponds to deploying a rogue wireless access point that mimics a legitimate SSID.
Each social engineering vector is correctly linked to its primary mechanism: Dumpster Diving targets physical garbage bins for discarded paper documents; Shoulder Surfing uses visual line-of-sight observation to steal input credentials; Typosquatting exploits browser typing mistakes to direct users to malicious domains; and an Evil Twin uses spoofed wireless SSIDs to intercept device network traffic.
Step-by-Step Solution
Key Concept
Social Engineering Methods and Threat Classifications
Estimated Time:1m 30s