A Chief Information Security Officer wants a penetration tester to evaluate the security awareness level of the company's employees. Which of the following tools can help the tester achieve this goal?

The correct answer is C. SET. SET (Social Engineering Toolkit) is an open-source framework specifically designed for simulating social engineering attacks, including phishing emails, credential harvesting pages, and SMS spoofing. It is the ideal tool for evaluating whether employees can recognize and resist…

Attacks and Exploits

Question

A Chief Information Security Officer wants a penetration tester to evaluate the security awareness level of the company’s employees. Which of the following tools can help the tester achieve this goal?

Options

AMetasploit
BHydra
CSET
DWPScan

How the community answered

(43 responses)

A
5% (2)
B
2% (1)
C
93% (40)

Explanation

SET (Social Engineering Toolkit) is an open-source framework specifically designed for simulating social engineering attacks, including phishing emails, credential harvesting pages, and SMS spoofing. It is the ideal tool for evaluating whether employees can recognize and resist social engineering attempts. Metasploit (A) is an exploitation framework targeting technical vulnerabilities. Hydra (B) is a password brute-forcing tool. WPScan (D) is a WordPress-specific vulnerability scanner. None of these assess human security awareness the way SET does.

Topics

#Social engineering#Security awareness#Penetration testing tools#SET

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice