As an IT security technician reviewing recently logged security events across the organization, match each security incident scenario to its corresponding social engineering or threat classification.
- Shoulder SurfingAn unauthorized individual secretly observes an employee entering a secure access PIN at a workstation terminal from across the room.
- Dumpster DivingAn attacker searches through un-shredded paper recycling containers placed outside a corporate building to recover confidential internal rosters.
- Watering Hole AttackAn attacker compromises a niche industry news portal regularly visited by target company employees to infect their systems with drive-by malware.
- TyposquattingAn employee mistypes a vendor portal domain name into a browser and lands on a fake site designed to harvest login credentials.
Cevap
Shoulder Surfing matches the observation of PIN entry. Dumpster Diving matches searching un-shredded trash bins. Watering Hole Attack matches compromising a heavily visited industry website. Typosquatting matches mistyping a domain URL to land on a spoofed site.
Each attack vector accurately maps to its defined operation: shoulder surfing focuses on visual observation of data input; dumpster diving searches physical waste for information; watering hole attacks compromise trusted third-party sites; and typosquatting leverages common domain name spelling errors.
Adım Adım Çözüm
Anahtar Kavram
Classification of physical and digital social engineering threat vectors