A helpdesk supervisor is creating a training module to help new IT support technicians identify various security threats reported by corporate employees. Match each security threat on the left with its corresponding real-world incident description on the right.
- KeyloggerSoftware covertly installed on a system to capture every key press and harvest sensitive user credentials.
- Drive-by DownloadMalicious code silently downloaded and executed on a device simply by visiting a compromised website, requiring no explicit user action.
- PretextingAn attack where an adversary fabricates a scenario and impersonates a trusted authority figure over the phone to trick an employee into granting system access.
- RootkitDeeply embedded malware that modifies operating system components to gain administrative privileges while actively concealing its presence from antimalware tools.
Cevap
Keylogger matches the description of capturing keystrokes covertly; Drive-by Download matches the automatic execution of malware upon visiting a compromised website; Pretexting matches fabricating a scenario to trick an employee into granting access; Rootkit matches deeply embedded malware hiding administrative access from security detection tools.
Each threat type is correctly matched to its distinct operation signature: Keyloggers record typed input, Drive-by Downloads exploit web sessions automatically without user prompts, Pretexting uses fabricated stories to manipulate staff, and Rootkits subvert system controls to mask administrative intrusion.
Adım Adım Çözüm
Anahtar Kavram
Identifying social engineering vectors and technical threat classifications by their mechanisms of operation and delivery.
Tahmini Süre:1m 30s