A penetration tester is attempting to get more people from a target company to download and run an executable. Which of the following would be the MOST effective way for the tester to achieve this objective?
A.
Dropping USB flash drives around the company campus with the file on it
B.
Attaching the file in a phishing SMS that warns users to execute the file or they will be locked out of their accounts
C.
Sending a pretext email from the IT department before sending the download instructions later
D.
Saving the file in a common folder with a name that encourages people to click it
This question assumes ALOT. How would a hacker send an email from the IT department, the questions do not indicate a successful breach. Why wouldn't an end user trust an email sent from the IT department? Lame
C. Sending a pretext email from the IT department before sending the download instructions later: This method builds trust by sending an initial email that establishes credibility and sets the stage for the follow-up email. When the download instructions are sent, employees are more likely to trust and follow them, believing the request is legitimate.
A. While this can be effective, it relies on physical access and the chance that someone will pick up and use the USB drive. This method also raises suspicion due to its unusual nature.
B. This method might prompt some users to act out of fear, but it also has a high risk of raising immediate suspicion and potential reporting to security teams.
D. This method depends on users stumbling upon the file and deciding to execute it, which is less predictable and may not reach a wide audience.
C. This clearly leans on the idea of trust and authority coming from the IT department. If this is a probable route for the attacker this is a no brainier. The other approaches could easily be dismissed. C is the BEST answer here.
B. Attaching the file in a phishing SMS that warns users to execute the file or they will be locked out of their accounts
upvoted 3 times
...
This section is not available anymore. Please use the main Exam Page.PT0-002 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Learner213
3 months, 1 week agoEtc_Shadow28000
10 months agoNarobi
1 year, 4 months agoTacosInMyBelly
1 year, 4 months agouser82
1 year, 2 months agohamz1999
1 year, 4 months ago[Removed]
1 year, 5 months agoMordor
1 year, 5 months ago