Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?
Suggested Answer: A
Get Premium ISO27-13-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
LI
Lizette
6 months ago
I feel uneasy about it. Always verify before sharing anything!
FR
Francoise
6 months ago
No way! It’s clearly A. They want to exploit trust.
GE
Geraldine
7 months ago
I’m not sure. Could it be B) Organisational threat?
GE
Gerald
7 months ago
I think it’s A too. They’re pretending to help but it’s a trap.
MI
Mindy
7 months ago
I thought it was just a technical threat, but this makes sense.
PA
Paz
7 months ago
100% agree, it's all about manipulation.
JO
Joanna
7 months ago
Wait, are we really giving out passwords over the phone?
LA
Lavera
8 months ago
Definitely a social engineering threat!
DA
Daniel
8 months ago
A. Social engineering is the easiest way for attackers to gain access. Protect your credentials!
XU
Xuan
8 months ago
A all the way! Hackers love to trick people into giving up their passwords. Lol, amateurs.
NO
Norah
8 months ago
I'd go with A. Trying to get sensitive info through deception is a textbook social engineering attack.
EL
Eleonora
9 months ago
Gotta be A. No legitimate tech support would ever ask for your password.
ST
Stephanie
9 months ago
A) Definitely a social engineering threat. Asking for login credentials is a classic tactic.
MA
Major
9 months ago
I’m a bit confused because it seems like a technical threat too, but I guess it’s more about the manipulation aspect.
EM
Emogene
9 months ago
I remember a practice question similar to this, and it was labeled as social engineering. I think that’s the right answer here too.
GW
Gwenn
9 months ago
I’m not so sure, but it feels like it could also be an organizational threat since it involves company security.
NO
Noel
9 months ago
Social engineering for sure. I'll stay calm, ask for their contact information, and report this to our security team.
AL
Alisha
10 months ago
I'm a bit confused. Could this also be a technical threat if they're trying to gain access to our systems? I'll need to double-check the definitions.
MY
My
10 months ago
Definitely a social engineering threat. I'll politely decline and suggest they contact our IT department directly.
DA
Daren
10 months ago
Agreed! It feels so wrong to give out personal info.
CH
Cheryl
10 months ago
I think this is definitely a social engineering threat, right? They’re trying to manipulate you into giving up your credentials.
ME
Merrilee
10 months ago
Definitely A) Social engineering threat. They’re trying to manipulate you.
EU
Eun
11 months ago
No way! People actually fall for this?
BR
Brett
11 months ago
Hmm, I'm not entirely sure. Could it also be an organizational threat if the company is trying to gain unauthorized access? I'll need to think this through carefully.
SH
Shawnna
11 months ago
This seems like a classic social engineering tactic. I'll be sure to avoid giving out any sensitive information.
CR
Crissy
6 months ago
Trust your instincts, don’t fall for it!
FE
Felicitas
6 months ago
Always verify the caller's identity first.
LA
Latanya
6 months ago
Classic tactic to manipulate users.
AN
Anglea
6 months ago
Definitely a social engineering threat!
TA
Tambra
11 months ago
Agreed! Never share your credentials.