nerdexam
CompTIA

220-802 · Question #637

An individual pretending to be a consultant trying to gain access to information is an example of which of the following?

The correct answer is C. Social Engineering. Pretending to be a trusted authority figure to manipulate someone into revealing information or granting access is the definition of social engineering.

Networking

Question

An individual pretending to be a consultant trying to gain access to information is an example of which of the following?

Options

  • AChassis Intrusion
  • BPrinciple of Least Privilege
  • CSocial Engineering
  • DIdentity Theft

How the community answered

(48 responses)
  • A
    2% (1)
  • C
    94% (45)
  • D
    4% (2)

Why each option

Pretending to be a trusted authority figure to manipulate someone into revealing information or granting access is the definition of social engineering.

AChassis Intrusion

Chassis intrusion refers to the physical detection of unauthorized opening of a computer case, not a manipulation tactic.

BPrinciple of Least Privilege

The principle of least privilege is a security design concept that limits user access rights, not a type of attack.

CSocial EngineeringCorrect

Social engineering exploits human psychology rather than technical vulnerabilities, using deception such as impersonating a consultant, vendor, or authority to gain unauthorized access to systems or information. This attack vector targets people as the weakest link in security, bypassing technical controls entirely.

DIdentity Theft

Identity theft involves stealing personal information to fraudulently assume someone's identity for financial gain, which is distinct from impersonating a role to gain access.

Concept tested: Social engineering attack through impersonation

Source: https://csrc.nist.gov/glossary/term/social_engineering

Topics

#social engineering#impersonation#physical access#security threats

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice