Examkin

Question

Difficulty: MediumSocial Engineering Attacks and Vectors

Match each social engineering attack vector on the left to the real-world enterprise incident scenario on the right that best illustrates it.

  • Watering Hole AttackCompromising a niche industry news portal frequently visited by target corporate software engineers to deliver zero-day malware to their endpoints.
  • TyposquattingRegistering a domain name visually similar to an enterprise cloud login page to harvest credentials from users who make minor typing errors.
  • VishingPlacing a telephone call to an accounting manager while impersonating an executive to manipulate them into processing an immediate wire transfer.
  • TailgatingFollowing closely behind an authorized employee into a badge-restricted server room facility without scanning an access card.

Answer

Watering Hole Attack matches the compromise of a frequently visited industry news portal; Typosquatting matches registering visually similar domain names; Vishing matches placing fraudulent phone calls to accounting personnel; Tailgating matches entering restricted facilities by following authorized employees closely.
Watering hole attacks target specific websites frequented by an intended victim demographic; typosquatting leverages domain name misspellings; vishing relies on voice phone calls for deception; and tailgating exploits physical proximity to enter secure areas without credentials.

Step-by-Step Solution

1
Identify the primary mechanism of each social engineering attack vector listed.
Watering hole focuses on group web targeting, typosquatting relies on mistyped URLs, vishing uses voice telephone calls, and tailgating relies on unauthorized physical following.
Understanding the core transport vector (web, network domain, telephony, or physical access) distinguishes each attack type.
2
Map each concept to the scenario containing matching technical or physical indicators.
Mapped industry portal compromise to watering hole, fake login URL to typosquatting, executive phone call to vishing, and unbadged entry to tailgating.
Evaluating specific indicators in each scenario ensures precise alignment with the threat definition.

Key Concept

Social Engineering Attacks and Vectors
Estimated Time:1m 30s
Rate this question

Topics

Social Engineering Attacks and Vectors

More questions from this topic