A corporate security operations center is investigating four distinct security incidents involving social engineering vectors across physical, web, domain, and email boundaries. Match each incident description on the left with its corresponding social engineering attack classification on the right.
- A threat actor gains physical access to a high-security server room by maintaining close distance behind an authorized technician entering through a restricted access control door.Tailgating
- A threat actor infects a third-party industry news repository heavily frequented by target defense contractors with zero-day exploit code.Watering Hole Attack
- A threat actor registers a domain that substitutes a Cyrillic character for a Latin character in an enterprise client portal URL to capture authentication tokens.Typosquatting (Homoglyph Attack)
- A threat actor impersonates the Chief Executive Officer via an urgent, out-of-band email instructing the financial controller to execute an immediate emergency wire transfer.Business Email Compromise (Executive Impersonation)
Answer
The incident involving physical access through a restricted entry corresponds to Tailgating; the third-party news portal infection corresponds to a Watering Hole Attack; the domain registration using lookalike characters corresponds to Typosquatting (Homoglyph Attack); and the urgent executive wire transfer directive corresponds to Business Email Compromise (Executive Impersonation).
Each scenario maps directly to its specific social engineering attack vector: physical trailing without authorization is tailgating; compromising a trusted industry forum to infect visitors is a watering hole attack; registering visual lookalike domains with international characters is typosquatting via homoglyphs; and impersonating C-level executives to mandate wire transfers is Business Email Compromise.
Step-by-Step Solution
Key Concept
Categorization of social engineering attack vectors across physical, web, domain, and email environments.
Estimated Time:2m 0s