Examkin

Question

Difficulty: EasySocial Engineering and Threat Types

A helpdesk technician is preparing end-user security awareness training materials covering non-technical threat vectors. Which TWO of the following security threats rely primarily on physical actions or physical access rather than digital network communication? (Select TWO)

  1. Tailgating into a restricted corporate facility by following an authorized employeeAnswer
  2. Dumpster diving to recover confidential papers from disposal binsAnswer
  3. C
    Spear phishing targeted emails sent directly to accounting department personnel
  4. D
    Vishing calls made to employees claiming to be internal IT support
  5. E
    Watering hole compromises of frequently visited industry websites

Answer

Tailgating into a restricted corporate facility by following an authorized employee and Dumpster diving to recover confidential papers from disposal bins are physical social engineering threats.
Tailgating and dumpster diving both require physical presence and direct real-world interaction—either following personnel through physical security barriers or searching through physical waste receptacles.

Step-by-Step Solution

1
Analyze each option to determine if it requires physical proximity/access or electronic/digital communications.
Tailgating requires walking through physical doors; dumpster diving requires physical handling of waste receptacles.
Both methods exploit physical security boundaries rather than digital computing systems.
2
Evaluate the remaining choices to identify digital attack vectors.
Spear phishing (email), vishing (phone calls), and watering hole attacks (compromised websites) all operate over digital or telecommunication channels.
These threat types target network protocols and end-user digital interactions.

Key Concept

Physical Social Engineering Threat Vectors
Rate this question

Topics

Social Engineering and Threat Types

More questions from this topic