Examkin

Question

Difficulty: MediumSocial Engineering and Threat Types

A security technician is categorizing various physical and digital security incidents reported across an enterprise environment. Match each social engineering or threat type on the left with its corresponding attack description on the right.

  • PharmingCorrupting local host files or DNS server records to silently redirect users from legitimate websites to fraudulent destinations.
  • TyposquattingRegistering web domain names containing common spelling errors of legitimate popular sites to catch users making typing mistakes.
  • TailgatingFollowing an authorized employee into a secured physical building or room without providing proper access credentials.
  • Watering Hole AttackCompromising a specific third-party website frequently visited by a targeted group of organization employees to infect their systems.

Answer

Pharming matches corrupting local host files or DNS server records; Typosquatting matches registering domain names containing spelling errors; Tailgating matches following an authorized employee into a secured area; Watering Hole Attack matches compromising a third-party website frequently visited by targeted employees.
Each attack vector is correctly paired based on its primary execution method: Pharming manipulates name resolution services; Typosquatting exploits mistyped URLs; Tailgating circumvents physical access controls by closely following authorized personnel; and Watering Hole attacks infect trusted websites frequented by specific target organizations.

Step-by-Step Solution

1
Analyze each threat concept to determine whether it relies on DNS manipulation, domain registration tactics, physical access bypass, or third-party web resource exploitation.
Pharming alters name resolution mechanisms; Typosquatting relies on domain mistyping; Tailgating exploits physical proximity during entry; Watering Hole attacks exploit trusted external websites.
Proper classification requires isolating the specific vector used by an attacker to execute the threat.
2
Map each term to its exact operational description based on technical definitions.
Matched left_1 to right_2, left_2 to right_3, left_3 to right_4, and left_4 to right_1.
Aligns social engineering nomenclature directly with real-world incident characteristics.

Key Concept

Social Engineering and Threat Type Identification
Rate this question

Topics

Social Engineering and Threat Types

More questions from this topic