nerdexam
GIAC

GSLC · Question #194

In which of the following techniques does an attacker change the address of the phishing site in such a manner that it can bypass filters or other application defenses that have been put in place to…

The correct answer is D. URL obfuscation. URL obfuscation is a phishing technique where attackers disguise or alter a malicious URL to evade IP-based filters and security defenses.

Security Operations & Incident Response Leadership

Question

In which of the following techniques does an attacker change the address of the phishing site in such a manner that it can bypass filters or other application defenses that have been put in place to block specific IP addresses?

Options

  • ADumpster diving
  • BReverse social engineering
  • CShoulder surfing
  • DURL obfuscation

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    6% (2)
  • D
    88% (28)

Why each option

URL obfuscation is a phishing technique where attackers disguise or alter a malicious URL to evade IP-based filters and security defenses.

ADumpster diving

Dumpster diving is a physical social engineering technique involving searching through discarded materials for sensitive information, unrelated to URL manipulation.

BReverse social engineering

Reverse social engineering is a technique where the attacker creates a scenario causing the victim to initiate contact and seek help from the attacker, not related to URL address modification.

CShoulder surfing

Shoulder surfing is a physical observation attack where an attacker watches a target enter credentials or sensitive data, with no involvement of URLs or network filtering.

DURL obfuscationCorrect

URL obfuscation involves manipulating a phishing site's address using techniques such as IP address encoding, hexadecimal or octal notation, or URL shortening to make it unrecognizable to security filters. This allows attackers to bypass blocklists that target specific IP addresses or domain patterns. It is the defining technique used to hide the true destination of phishing links from both automated defenses and end users.

Concept tested: URL obfuscation in phishing to bypass IP filters

Topics

#URL obfuscation#phishing#IP filter bypass#social engineering

Community Discussion

No community discussion yet for this question.

Full GSLC Practice