Examkin

Soru

Zorluk: KolaySocial Engineering and Threat Types

A helpdesk technician is preparing end-user security awareness training materials covering non-technical threat vectors. Which TWO of the following security threats rely primarily on physical actions or physical access rather than digital network communication? (Select TWO)

  1. Tailgating into a restricted corporate facility by following an authorized employeeCevap
  2. Dumpster diving to recover confidential papers from disposal binsCevap
  3. C
    Spear phishing targeted emails sent directly to accounting department personnel
  4. D
    Vishing calls made to employees claiming to be internal IT support
  5. E
    Watering hole compromises of frequently visited industry websites

Cevap

Tailgating into a restricted corporate facility by following an authorized employee and Dumpster diving to recover confidential papers from disposal bins are physical social engineering threats.
Tailgating and dumpster diving both require physical presence and direct real-world interaction—either following personnel through physical security barriers or searching through physical waste receptacles.

Adım Adım Çözüm

1
Analyze each option to determine if it requires physical proximity/access or electronic/digital communications.
Tailgating requires walking through physical doors; dumpster diving requires physical handling of waste receptacles.
Both methods exploit physical security boundaries rather than digital computing systems.
2
Evaluate the remaining choices to identify digital attack vectors.
Spear phishing (email), vishing (phone calls), and watering hole attacks (compromised websites) all operate over digital or telecommunication channels.
These threat types target network protocols and end-user digital interactions.

Anahtar Kavram

Physical Social Engineering Threat Vectors
Bu soruyu puanla

Konular

Social Engineering and Threat Types

Bu konudan daha fazla soru