GCED: GIAC Certified Enterprise DefenderDemo

By GIAC · Question Mode

QuestionQ10

Defensive Infrastructure and Tactics

Michael, a software engineer, added a module to a banking customer's code. The new module deposits small sums of money into his personal bank account.

Michael can edit the code, but only code reviewers can commit modules to production. The reviewers have a work backlog and are often willing to trust software developers' testing and confidence in the code.

Which technique is Michael most likely to use to implement the malicious code?

  • A Denial of Service
  • B Race Condition
  • C Phishing
  • D Social Engineering
Explanation

Social engineering exploits people’s trust to obtain an unauthorized action. By relying on overworked reviewers to trust his assertions about testing and approve the module, Michael can have malicious code committed to production without possessing deployment authority.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!