PT0-002 · Question #155
A penetration tester recently performed a social-engineering attack in which the tester found an employee of the target company at a local coffee shop and over time built a relationship with the…
The correct answer is C. Baiting. The tester used Baiting. Baiting is a social-engineering technique that lures a victim using a physical medium - in this case, an external hard drive given as a birthday gift. The expectation is that the employee will plug the device into a corporate system, potentially…
Question
A penetration tester recently performed a social-engineering attack in which the tester found an employee of the target company at a local coffee shop and over time built a relationship with the employee. On the employee’s birthday, the tester gave the employee an external hard drive as a gift. Which of the following social-engineering attacks was the tester utilizing?
Exhibit
Options
- APhishing
- BTailgating
- CBaiting
- DShoulder surfing
How the community answered
(32 responses)- A6% (2)
- B19% (6)
- C72% (23)
- D3% (1)
Explanation
The tester used Baiting. Baiting is a social-engineering technique that lures a victim using a physical medium - in this case, an external hard drive given as a birthday gift. The expectation is that the employee will plug the device into a corporate system, potentially delivering malware or granting access. The long relationship-building phase is part of the pretexting setup to make the gift seem innocent. Phishing is email-based deception, tailgating is physically following someone through a secure door, and shoulder surfing is visually observing someone's screen or keyboard - none of these match the scenario.
Topics
Community Discussion
No community discussion yet for this question.