Examkin

Question

Difficulty: MediumSocial Engineering Attacks and Vectors

A receptionist at an enterprise regional office receives a phone call from an individual claiming to be a technician from the building management company. The caller states that an urgent HVAC emergency requires immediate physical access to the server room key box and asks the receptionist to read the emergency access PIN code over the phone. The caller provides fake ticket numbers and references real facility manager names to build credibility. Which of the following social engineering techniques did the attacker primarily execute in this scenario?

  1. PretextingAnswer
  2. B
    Watering hole attack
  3. C
    Baiting
  4. D
    Pharming

Answer

Pretexting
Pretexting is the act of creating a believable fabricated scenario or identity (the pretext) to trick a victim into disclosing sensitive information or granting unauthorized access. In this scenario, the attacker impersonated a facilities technician and fabricated an HVAC emergency to deceive the receptionist into revealing a sensitive PIN.

Step-by-Step Solution

1
Analyze the attack vector and communication channel in the scenario.
The attack uses direct phone communication where the adversary impersonates an authorized technician and provides fabricated context (fake ticket numbers, real employee names).
Identifying the method of contact helps narrow down the social engineering classification.
2
Evaluate the underlying psychological tactic.
The attacker creates a false background story (an emergency HVAC maintenance event) to manipulate the recipient into breaking security protocols.
Creating a fake background narrative to establish trust and trick a target is the defining characteristic of pretexting.
3
Compare the scenario against alternative social engineering definitions.
Watering hole attacks involve site compromise, baiting uses tangible enticements, and pharming uses DNS manipulation; none of these rely on direct verbal narrative fabrication.
Differentiating techniques ensures accurate categorization based on attack mechanics.

Key Concept

Pretexting in Social Engineering
Rate this question

Topics

Social Engineering Attacks and Vectors

More questions from this topic