312-85: Certified Threat Intelligence AnalystDemo

Question

A threat analyst at XYZ Company was asked to conduct threat-intelligence analysis. During the information-collection phase, he used a social-engineering technique in which he posed as a legitimate or authorized person. With this technique, he collected sensitive information by scanning terminals for passwords, looking for important documents on desks, rummaging through bins, and so on.

Which social-engineering technique did the analyst use for information collection?

A Shoulder surfing
B Impersonation
C Dumpster diving
D Piggybacking

Explanation

Impersonation is a social-engineering technique in which an attacker assumes a trusted, legitimate, or authorized identity to obtain information or access. The analyst's pretense of being an authorized person is the defining characteristic.

312-85: Certified Threat Intelligence AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ46

Community Discussion