nerdexam
GAQM

CPEH-001 · Question #956

Stephen, an attacker, targeted the industrial control systems of an organization. He generated a fraudulent email with a malicious attachment and sent it to employees of the target organization. An…

The correct answer is A. Spear-phishing attack. See the full explanation below for the reasoning.

Question

Stephen, an attacker, targeted the industrial control systems of an organization. He generated a fraudulent email with a malicious attachment and sent it to employees of the target organization. An employee who manages the sales software of the operational plant opened the fraudulent email and clicked on the malicious attachment. This resulted in the malicious attachment being downloaded and malware being injected into the sales software maintained in the victim's system. Further, the malware propagated itself to other networked systems, finally damaging the industrial automation components. What is the attack technique used by Stephen to damage the industrial systems?

Options

  • ASpear-phishing attack
  • BSMishing attack
  • CReconnaissance attack
  • DHMI-based attack

How the community answered

(27 responses)
  • A
    74% (20)
  • B
    7% (2)
  • C
    15% (4)
  • D
    4% (1)

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice