Gray Box Testing – Train.i.ng

A pen tester calling an employee and explains how they are the CEO’s executive assistant and they need to do what they are told is:
  • Intimidation.
  • Familiarity.
  • Scarcity.
  • Authority.
    (Correct)

Explanation

Social engineering uses people skills to bypass security controls. Authority (someone you trust or are afraid of) – Look and sound like an authority figure, be in charge, this can be in a uniform or a suit. Most effective with impersonation, whaling, and vishing attacks.

Leave a Reply