nerdexam
CompTIACompTIA

PT0-002 · Question #51

PT0-002 Question #51: Real Exam Question with Answer & Explanation

The correct answer is D: Performing spear phishing against employees by posing as senior management. {"question_number": 2, "correct_answer": "D", "explanation": "With only eight business hours, the attacker needs a high-probability, fast technique. Spear phishing posing as senior management (CEO/CFO fraud) targets the weakest link - humans - and exploits authority and urgency,

Attacks and Exploits

Question

A penetration tester has been given eight business hours to gain access to a client's financial system. Which of the following techniques will have the highest likelihood of success?

Options

  • AAttempting to tailgate an employee going into the client's workplace
  • BDropping a malicious USB key with the company's logo in the parking lot
  • CUsing a brute-force attack against the external perimeter to gain a foothold
  • DPerforming spear phishing against employees by posing as senior management

Explanation

{"question_number": 2, "correct_answer": "D", "explanation": "With only eight business hours, the attacker needs a high-probability, fast technique. Spear phishing posing as senior management (CEO/CFO fraud) targets the weakest link - humans - and exploits authority and urgency, yielding quick credential disclosure or malicious action. Tailgating (A) requires physical proximity and opportunity. USB drops (B) rely on an employee finding, picking up, and plugging in the device - uncertain timing. Brute-force against a perimeter (C) is slow, noisy, and usually blocked by lockout policies. Spear phishing consistently delivers the fastest ROI in time-constrained engagements.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

Topics

#Social Engineering#Spear Phishing#Initial Access#Penetration Testing Strategy

Community Discussion

No community discussion yet for this question.

Full PT0-002 PracticeBrowse All PT0-002 Questions