A helpdesk supervisor is creating a training module to help new IT support technicians identify various security threats reported by corporate employees. Match each security threat on the left with its corresponding real-world incident description on the right.
- KeyloggerSoftware covertly installed on a system to capture every key press and harvest sensitive user credentials.
- Drive-by DownloadMalicious code silently downloaded and executed on a device simply by visiting a compromised website, requiring no explicit user action.
- PretextingAn attack where an adversary fabricates a scenario and impersonates a trusted authority figure over the phone to trick an employee into granting system access.
- RootkitDeeply embedded malware that modifies operating system components to gain administrative privileges while actively concealing its presence from antimalware tools.
Answer
Keylogger matches the description of capturing keystrokes covertly; Drive-by Download matches the automatic execution of malware upon visiting a compromised website; Pretexting matches fabricating a scenario to trick an employee into granting access; Rootkit matches deeply embedded malware hiding administrative access from security detection tools.
Each threat type is correctly matched to its distinct operation signature: Keyloggers record typed input, Drive-by Downloads exploit web sessions automatically without user prompts, Pretexting uses fabricated stories to manipulate staff, and Rootkits subvert system controls to mask administrative intrusion.
Step-by-Step Solution
Key Concept
Identifying social engineering vectors and technical threat classifications by their mechanisms of operation and delivery.
Estimated Time:1m 30s