CNX-001 · Question #14
A network engineer identified several failed log-in attempts to the VPN from a user's account. When the engineer inquired, the user mentioned the IT help desk called and asked them to change their…
The correct answer is D. Social engineering. Social engineering is the manipulation of people - rather than systems - to divulge credentials, take actions, or reveal sensitive information. In this scenario, an attacker impersonated IT help desk staff (a technique called vishing when done over the phone, or pretexting more…
Question
A network engineer identified several failed log-in attempts to the VPN from a user's account. When the engineer inquired, the user mentioned the IT help desk called and asked them to change their password. Which of the following types of attacks occurred?
Options
- AInitialization vector
- BOn-path
- CEvil twin
- DSocial engineering
How the community answered
(26 responses)- C4% (1)
- D96% (25)
Explanation
Social engineering is the manipulation of people - rather than systems - to divulge credentials, take actions, or reveal sensitive information. In this scenario, an attacker impersonated IT help desk staff (a technique called vishing when done over the phone, or pretexting more broadly) to trick the user into changing their password, presumably to a value the attacker already knew or controlled. The subsequent failed VPN login attempts confirm the attacker then tried to use those credentials. An initialization vector attack (A) is a cryptographic attack. An on-path attack (B) involves intercepting network traffic. An evil twin (C) is a rogue wireless access point. None of those involve manipulating a person directly.
Topics
Community Discussion
No community discussion yet for this question.