Examkin

Soru

Zorluk: OrtaSocial Engineering Attacks and Vectors

Match each social engineering attack vector to its corresponding real-world enterprise incident scenario.

  • WhalingA highly targeted electronic message specifically designed to deceive a Chief Executive Officer into authorizing an immediate high-value wire transfer.
  • PretextingAn adversary impersonates a third-party executive recruiter during a phone call to establish an invented scenario and extract confidential internal organizational structures.
  • Shoulder surfingAn unauthorized individual visually observes a datacenter technician entering passcode credentials from a nearby elevated observation area using high-powered optics.
  • Diversion theftAn attacker manipulates shipping manifest documents to trick a commercial logistics carrier into rerouting a scheduled shipment of enterprise hardware components.

Cevap

Whaling matches the CEO wire transfer targeting scenario; Pretexting matches the fake recruiter phone call scenario; Shoulder surfing matches the visual observation of credential entry scenario; Diversion theft matches the rerouted physical hardware delivery scenario.
Whaling explicitly targets C-level executives (such as a Chief Executive Officer). Pretexting involves creating a believable false story or role (such as a recruiter) to manipulate the victim. Shoulder surfing relies on visually spying on credential entries or confidential displays. Diversion theft manipulates delivery routes or physical couriers to misdirect incoming or outgoing physical goods.

Adım Adım Çözüm

1
Analyze each social engineering attack term and identify its primary operating characteristic.
Whaling targets senior executives; Pretexting uses constructed narratives; Shoulder surfing uses direct visual observation; Diversion theft manipulates physical delivery logistics.
Distinguishing between target roles, media, and physical mechanisms allows accurate classification.
2
Map each term to the enterprise scenario that exhibits its specific behavioral indicator.
Whaling pairs with the CEO email; Pretexting pairs with the recruiter phone scenario; Shoulder surfing pairs with optical passcode viewing; Diversion theft pairs with altered courier paperwork.
Matching each vector to its distinct attack indicator ensures precise threat identification.

Anahtar Kavram

Social Engineering Attacks and Vectors
Bu soruyu puanla

Konular

Social Engineering Attacks and Vectors

Bu konudan daha fazla soru