A cybersecurity technician is reviewing various security incident reports across an enterprise network. Match each threat type or social engineering vector on the left to its corresponding real-world incident description on the right.
- TyposquattingAn attacker registers a domain visually similar to an authentic corporate site (e.g., payroll-portal.co) to capture credentials when employees make URL typographical errors.
- Dumpster DivingAn unauthorized individual inspects discarded recycling bins behind a facility to retrieve non-shredded network topology diagrams and staff directories.
- Logic BombMalicious code deliberately planted in a database server that remains idle until triggered by a specific event, such as a terminated administrator's account deletion.
- SmishingEmployees receive fraudulent text messages on company-issued mobile devices directing them to a credential-harvesting site via an urgent link.
Answer
Typosquatting corresponds to registering lookalike web domains to exploit typing mistakes. Dumpster Diving corresponds to searching physical waste bins for un-shredded internal documents. Logic Bomb corresponds to dormant malicious code designed to execute upon specific system events or triggers. Smishing corresponds to using deceptive SMS text messages for phishing attacks.
Each attack vector accurately aligns with its defining operation: Typosquatting exploits browser address mistyping using lookalike domains; Dumpster Diving extracts physical papers from refuse areas; Logic Bombs run code conditionally upon specified triggers; and Smishing delivers phishing lures via mobile SMS messages.
Step-by-Step Solution
Key Concept
Social Engineering Techniques and Threat Classifications
Estimated Time:2m 0s