Sara, an attacker, is recording a person typing in their ID number into a keypad to gain access to the building. Sara then calls the helpdesk and informs them that their PIN no longer works and…

The correct answer is C. Impersonation. The attack sequence has two steps: first, shoulder surfing (watching/recording the victim enter their PIN), then impersonation (calling the helpdesk while pretending to be the victim to get the PIN changed). The question asks which attack occurred LAST - that is the phone call…

Threats, vulnerabilities, and mitigations

Question

Sara, an attacker, is recording a person typing in their ID number into a keypad to gain access to the building. Sara then calls the helpdesk and informs them that their PIN no longer works and would like to change it. Which of the following attacks occurred LAST?

Options

APhishing
BShoulder surfing
CImpersonation
DTailgating

How the community answered

(48 responses)

A
2% (1)
B
10% (5)
C
81% (39)
D
6% (3)

Explanation

The attack sequence has two steps: first, shoulder surfing (watching/recording the victim enter their PIN), then impersonation (calling the helpdesk while pretending to be the victim to get the PIN changed). The question asks which attack occurred LAST - that is the phone call to the helpdesk, which is impersonation. Phishing involves deceptive electronic messages. Tailgating is physically following someone through a secured entrance. Neither applies here.

Topics

#shoulder surfing#impersonation#social engineering#attack sequencing

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice