ECSA v10: EC-Council Certified Security Analyst v10Demo

By ECCouncil · Question Mode

QuestionQ109

Social Engineering Penetration Testing Methodology

Linson, an employee at Skitac Ltd., finds a USB flash drive on the company pavement. Before he can give it to the security guard, he decides to inspect it. He connects it to his mobile phone using an OTG and discovers some of his favorite music playlists and games. He attempts to download them to his mobile, but later learns that he was attacked and that attackers exposed some of his sensitive financial information.

What type of attack did Linson experience?

  • A Social engineering attack
  • B Phishing attack
  • C Wardriving attack
  • D Impersonation attack
Explanation

Leaving attractive files on a USB drive to induce someone to connect it and download content is baiting, a social-engineering technique. The victim’s curiosity and interest in the media and games are exploited to cause the device compromise and financial-data exposure.

Community Discussion

No comments yet. Be the first to start the discussion!