220-802 · Question #637
An individual pretending to be a consultant trying to gain access to information is an example of which of the following?
The correct answer is C. Social Engineering. Pretending to be a trusted authority figure to manipulate someone into revealing information or granting access is the definition of social engineering.
Question
An individual pretending to be a consultant trying to gain access to information is an example of which of the following?
Options
- AChassis Intrusion
- BPrinciple of Least Privilege
- CSocial Engineering
- DIdentity Theft
How the community answered
(48 responses)- A2% (1)
- C94% (45)
- D4% (2)
Why each option
Pretending to be a trusted authority figure to manipulate someone into revealing information or granting access is the definition of social engineering.
Chassis intrusion refers to the physical detection of unauthorized opening of a computer case, not a manipulation tactic.
The principle of least privilege is a security design concept that limits user access rights, not a type of attack.
Social engineering exploits human psychology rather than technical vulnerabilities, using deception such as impersonating a consultant, vendor, or authority to gain unauthorized access to systems or information. This attack vector targets people as the weakest link in security, bypassing technical controls entirely.
Identity theft involves stealing personal information to fraudulently assume someone's identity for financial gain, which is distinct from impersonating a role to gain access.
Concept tested: Social engineering attack through impersonation
Source: https://csrc.nist.gov/glossary/term/social_engineering
Topics
Community Discussion
No community discussion yet for this question.