Examkin

Question

Difficulty: HardSocial Engineering Attacks and Vectors

An incident response team investigates a physical intrusion where an unauthorized cellular bridge was connected inside a financial firm's network distribution room. Reviewing access logs and security footage reveals that an attacker contacted the facilities desk pretending to be an official state electrical inspector. The attacker claimed an imminent safety violation required an emergency inspection of the transfer switches to avoid immediate facility shutdown. Driven by the fear of operational disruption, the staff member generated a temporary badge and granted unescorted access without cross-referencing the official vendor schedule. Which social engineering attack vector and primary principles of influence were combined to execute this breach?

  1. Pretexting leveraging authority and urgencyAnswer
  2. B
    Tailgating leveraging consensus and social proof
  3. C
    Baiting leveraging scarcity and familiarity
  4. D
    Watering hole attack leveraging trust and intimidation

Answer

Pretexting leveraging authority and urgency
Pretexting is the technique of establishing a fabricated scenario or identity to trick a victim into disclosing sensitive information or granting unauthorized physical/logical access. The threat actor manipulated human behavior by claiming official inspector status (authority) and warning of immediate power shutdown (urgency), prompting staff to bypass standard identity verification rules.

Step-by-Step Solution

1
Analyze the attack mechanism described in the scenario
Identified that the attacker created a complex invented story (acting as a fake electrical inspector needing emergency access) to trick staff into granting entry.
Creating a fabricated scenario to manipulate a target into providing access or information defines pretexting.
2
Evaluate the psychological principles of influence applied by the threat actor
Recognized that posing as an official inspector appeals to authority, while threatening an immediate facility shutdown creates extreme urgency.
Social engineers leverage authority to compel compliance with perceived figures of power and urgency to rush victims into bypassing standard security verification protocols.
3
Differentiate the correct vector and influence principles from distractors
Ruled out physical piggybacking (tailgating), physical lure placement (baiting), and compromised website drive-bys (watering hole).
The breach relied on direct communication, persona fabrication, and high-pressure compliance demands rather than passive physical entry or technical site compromise.

Key Concept

Pretexting and Psychological Principles of Influence in Social Engineering
Rate this question

Topics

Social Engineering Attacks and Vectors

More questions from this topic