Match each social engineering attack vector or influence principle on the left with the enterprise incident scenario on the right that best demonstrates its execution.
- WhalingA spear-phishing email carefully tailored with corporate financial context is sent directly to the Chief Executive Officer to trick them into authorizing a wire transfer.
- Shoulder SurfingAn unauthorized individual seating themselves nearby visually monitors an employee entering administrative credentials on a laptop keyboard in a public cafe.
- Diversion TheftAn adversary impersonates a logistics coordinator to contact a courier and redirect an incoming shipment of core network switches to an unverified off-site location.
- Scarcity (Influence Principle)A malicious internal bulletin claims that only five software trial licenses remain for an upgraded administrative suite to trick staff into revealing their login tokens.
Cevap
Whaling pairs with the scenario involving a targeted email sent directly to the CEO. Shoulder Surfing pairs with the scenario involving direct visual observation of credential entry in a cafe. Diversion Theft pairs with the scenario involving redirecting incoming physical shipments of equipment. Scarcity pairs with the scenario leveraging limited remaining trial licenses to trick staff.
Each attack vector or principle matches its operational execution: Whaling targets top executives (CEO), Shoulder Surfing relies on direct visual observation, Diversion Theft intercepts physical transit shipments, and Scarcity exploits psychological urgency built around limited remaining quantities.
Adım Adım Çözüm
Anahtar Kavram
Social Engineering Vectors and Principles of Influence
Tahmini Süre:1m 30s