Examkin

Soru

Zorluk: OrtaSocial Engineering Attacks and Vectors

During a physical security assessment, security auditors observe an unauthorized individual entering a secured facility by following closely behind a credentialed staff member through a badge-access door. Once inside the facility, the individual secretly records an administrator entering sensitive credentials onto a workstation keyboard from a nearby seating area. Which of the following social engineering vectors were executed during this physical security breach? (Select TWO)

  1. TailgatingCevap
  2. Shoulder surfingCevap
  3. C
    Pretexting
  4. D
    Watering hole attack

Cevap

The correct social engineering attack vectors are tailgating and shoulder surfing.
Tailgating is correctly identified because the intruder physically followed a credentialed user through an access point without authenticating. Shoulder surfing is correctly identified because the intruder observed the physical entry of confidential credentials onto a workstation keyboard.

Adım Adım Çözüm

1
Analyze the physical access mechanism described in the scenario.
The unauthorized individual entered the secure facility by following an authorized employee through a badge-access door without credential verification, defining tailgating.
Tailgating relies on physical proximity to bypass electronic entry controls.
2
Analyze the information-gathering method described in the scenario.
The intruder visually observed and recorded an administrator entering sensitive credentials onto a keyboard from a nearby location, defining shoulder surfing.
Shoulder surfing relies on direct observation of user inputs or displays without verbal interaction.

Anahtar Kavram

Physical Social Engineering Vectors (Tailgating and Shoulder Surfing)
Bu soruyu puanla

Konular

Social Engineering Attacks and Vectors

Bu konudan daha fazla soru