GIAC Exam GISP Topic 3 Question 63 Discussion

Actual exam question for GIAC's GISP exam

Question #: 63
Topic #: 3

[All GISP Questions]

Which of the following are types of social engineering attacks?

Each correct answer represents a complete solution. Choose two.

AAn unauthorized person gains entrance to the building where the company's database server resides and accesses the server by pretending to be an employee.

BAn unauthorized person inserts an intermediary software or program between two communicating hosts to listen to and modify the communication packets passing between the two hosts.

CAn unauthorized person calls a user and pretends to be a system administrator in order to get the user's password.

DAn unauthorized person modifies packet headers by using someone else's IP address to hide his identity.

Show Suggested Answer

Suggested Answer: C

by Kirk at Nov 17, 2024, 04:56 PM

Limited Time Offer

25%

Off

Get Premium GISP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alpha

28 days ago

I bet the person who wrote this question has been the victim of a few social engineering scams. A and C all the way!

upvoted 0 times

...

Lavelle

29 days ago

Tricky one, but A and C are the social engineering attacks, no doubt about it. The others are more technical.

upvoted 0 times

Linn

16 days ago

C) An unauthorized person calls a user and pretends to be a system administrator in order to get the user's password.

upvoted 0 times

...

Sabrina

19 days ago

A) An unauthorized person gains entrance to the building where the company's database server resides and accesses the server by pretending to be an employee.

upvoted 0 times

...

Lelia

1 months ago

Ah, the old 'pretend to be someone important' trick. A and C are the way to go on this one.

upvoted 0 times

Lindsey

17 days ago

C) An unauthorized person calls a user and pretends to be a system administrator in order to get the user's password.

upvoted 0 times

...

Beatriz

21 days ago

A) An unauthorized person gains entrance to the building where the company's database server resides and accesses the server by pretending to be an employee.

upvoted 0 times

...

Elke

1 months ago

Hmm, B and D seem more like network attacks than social engineering. A and C are the clear social engineering options.

upvoted 0 times

Katheryn

11 days ago

C) An unauthorized person calls a user and pretends to be a system administrator in order to get the user's password.

upvoted 0 times

...

Beula

16 days ago

A) An unauthorized person gains entrance to the building where the company's database server resides and accesses the server by pretending to be an employee.

upvoted 0 times

...

Renea

2 months ago

Looks like the classic social engineering tricks. A and C are definitely the right answers here.

upvoted 0 times

Rosalind

28 days ago

C) An unauthorized person calls a user and pretends to be a system administrator in order to get the user's password.

upvoted 0 times

...

Jennie

2 months ago

A) An unauthorized person gains entrance to the building where the company's database server resides and accesses the server by pretending to be an employee.

upvoted 0 times

...