PT0-001 · Question #57
During a full-scope security assessment, which of the following is a prerequisite to social engineer a target by physically engaging them?
The correct answer is B. Preparing a pretext. Social engineering via physical engagement requires a believable pretext - a fabricated scenario or identity - before any interaction with the target can take place.
Question
During a full-scope security assessment, which of the following is a prerequisite to social engineer a target by physically engaging them?
Options
- ALocating emergency exits
- BPreparing a pretext
- CShoulder surfing the victim
- DTailgating the victim
How the community answered
(19 responses)- A5% (1)
- B95% (18)
Why each option
Social engineering via physical engagement requires a believable pretext - a fabricated scenario or identity - before any interaction with the target can take place.
Locating emergency exits is a physical reconnaissance activity that may support a broader assessment but is not a prerequisite specific to socially engineering a target.
A pretext is a fabricated story, identity, or scenario that the attacker prepares in advance to justify their presence and manipulate the target into compliance. Without a believable pretext, the attacker has no basis for the social engineering interaction and would be unable to establish credibility or elicit sensitive information. It is a foundational prerequisite that must exist before any physical engagement with the target occurs.
Shoulder surfing is a passive observation technique used to capture information such as credentials, and it is a tactic that occurs during engagement rather than a prerequisite before it.
Tailgating is a physical bypass technique used to gain unauthorized access by following someone through a secured entry, which is itself an action taken during engagement and not a preparation step.
Concept tested: Social engineering pretext preparation as prerequisite
Source: https://csrc.nist.gov/glossary/term/social_engineering
Topics
Community Discussion
No community discussion yet for this question.