A group of security consultants is conducting an assessment of a customer's network across multiple physical locations. To save time, the customer has allowed the consultants to install a single…

Question

Options

• AUsing persuasion and deception to gain access to systems
• BConducting physical attacks by a red team
• CMoving laterally through a network from compromised hosts
• DPerforming black-box penetration testing

• A
  69% (18)
• B
  4% (1)
• C
  19% (5)
• D
  8% (2)

Explanation

The scenario describes consultants using open-source intelligence (OSINT) and social engineering - and the question asks which answer best describes the overall technique they are employing. Social engineering is fundamentally defined as using persuasion and deception to manipulate people into granting access, divulging credentials, or performing actions. The authorized server inside the perimeter is a sanctioned foothold for assessment purposes, not a compromised host used for lateral movement (C). Option D (black-box) is wrong because the customer has provided explicit access (the server). Option B (physical attacks) is not described. The dominant technique characterizing this engagement - particularly given the explicit mention of social engineering - is persuasion and deception.

No community discussion yet for this question.