Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil Exam 212-82 Topic 10 Question 49 Discussion

Actual exam question for Eccouncil's 212-82 exam
Question #: 49
Topic #: 10
[All 212-82 Questions]

Jane Is a newly appointed Chief Financial Officer at BigTech Corp. Within a week, she receives an email from a sender posing as the company's CEO. instructing her to make an urgent wire transfer. Suspicious. Jane decides to verify the request's authenticity. She receives another email from the same sender, now attaching a seemingly scanned Image of the CEO's handwritten note. Simultaneously, she gets a call from an 'IT support' representative, instructing her to click on the attached image to download a 'security patch'. Concerned. Jane must determine which social engineering tactics she encountered.

Show Suggested Answer Hide Answer
Suggested Answer: D

Jane encountered a combination of social engineering tactics:

Spear Phishing:

CEO Impersonation Email: The initial email and the follow-up with the scanned image of the CEO's handwritten note are examples of spear phishing, where attackers target specific individuals with tailored messages to gain their trust and extract sensitive information.

Vishing:

'IT Support' Call: The phone call from the supposed 'IT support' representative asking Jane to download a 'security patch' is a form of vishing (voice phishing). This tactic involves using phone calls to trick victims into revealing sensitive information or performing actions that compromise security.


Social Engineering Techniques: SANS Institute Reading Room

Phishing and Vishing Explained: Norton Security

Contribute your Thoughts:

Kirk
25 days ago
I think it was phishing through the CEO impersonation email and baiting via the 'IT support' call.
upvoted 0 times
...
Felicitas
28 days ago
I believe it was baiting through the handwritten note image and preloading through the 'IT support' call.
upvoted 0 times
...
Suzan
29 days ago
Ah, the old 'IT support' trick. Classic social engineering. Good thing Jane is on the ball and didn't fall for it!
upvoted 0 times
Danica
10 days ago
Jane: It was definitely spear phishing and vishing.
upvoted 0 times
...
Cecily
21 days ago
Jane: I'm glad I didn't click on that image.
upvoted 0 times
...
Geraldo
22 days ago
Jane: That 'IT support' call seemed fishy.
upvoted 0 times
...
...
India
1 months ago
I agree, the CEO impersonation email and the 'IT support' call seem like spear phishing and vishing.
upvoted 0 times
...
Wilda
1 months ago
I bet the scammers are having a field day with all these remote work setups. Gotta stay vigilant, Jane!
upvoted 0 times
...
Raina
1 months ago
Hmm, I'm not sure. The 'IT support' call feels more like baiting to me. But the CEO email is definitely spear phishing. This is a tricky one!
upvoted 0 times
Carmela
22 days ago
User 3: The 'IT support' call could be baiting to make you click on the attachment.
upvoted 0 times
...
Earlean
24 days ago
User 2: I agree, it's a common tactic to impersonate someone in authority.
upvoted 0 times
...
Theola
25 days ago
User 1: The CEO email is definitely spear phishing.
upvoted 0 times
...
...
Stephaine
2 months ago
I think the answer is D. Spear phishing through the CEO email and vishing with the 'IT support' call. The handwritten note is just a clever attempt to add legitimacy to the scam.
upvoted 0 times
...
Tennie
2 months ago
This is a classic case of spear phishing. The CEO impersonation email and the 'IT support' call are clear tactics to get Jane to click on that malicious attachment.
upvoted 0 times
Kati
1 months ago
This is a classic case of spear phishing. The CEO impersonation email and the 'IT support' call are clear tactics to get Jane to click on that malicious attachment.
upvoted 0 times
...
Pamela
1 months ago
B) Spear phishing through both the emails and quizzing via the 'IT support' call.
upvoted 0 times
...
Jacklyn
1 months ago
A) Baiting via the handwritten note image and preloading through the 'IT support' call.
upvoted 0 times
...
...
Lavelle
2 months ago
I think the tactics used were spear phishing and vishing.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77