Examkin

Question

Difficulty: MediumSocial Engineering and Threat Types

An IT support technician is reviewing user tickets regarding security concerns at a regional office. One ticket details an email sent specifically to the chief financial officer requesting an urgent transfer of funds to a fraudulent supplier account. Another ticket reports an unknown individual wearing high-visibility work attire who gained entry to the server room by carrying a heavy box and asking an employee to hold the secure door open. Which of the following social engineering attack types are demonstrated in these scenarios? (Select TWO.)

  1. WhalingAnswer
  2. PiggybackingAnswer
  3. C
    Vishing
  4. D
    Shoulder surfing
  5. E
    Typosquatting

Answer

The correct social engineering attack types are Whaling and Piggybacking.
Whaling correctly identifies the high-level targeted email attack directed at an executive (CFO) to initiate unauthorized wire transfers. Piggybacking correctly identifies the physical security breach where an unauthorized individual convinces an employee to assist them by holding open a badge-restricted door.

Step-by-Step Solution

1
Analyze the first incident regarding the CFO receiving a targeted fund transfer request.
Identify that spear phishing targeted specifically at executive leadership (such as a CFO) is categorized as Whaling.
Whaling focuses exclusively on high-level personnel with significant administrative or financial authority.
2
Analyze the second incident regarding an unknown individual gaining entry to a physical secure room.
Identify that entering a secure location by asking an authorized user to hold open the door with their consent/assistance is Piggybacking.
Unlike tailgating (where the attacker follows unnoticed), piggybacking involves tricking an authorized employee into intentionally holding the door open due to social courtesy.

Key Concept

Identifying Social Engineering Threat Types and Physical Access Vectors
Rate this question

Topics

Social Engineering and Threat Types

More questions from this topic