MENU
John works as an IT Technician for PassGuide Inc. One morning, John receives an e-mail from the company's Manager asking him to provide his logon ID and password, but the company policy restricts users from disclosing their logon IDs and passwords. Which type of possible attack is this?
Suggested Answer: A
Get Premium GSLC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
46 comments · newest first
LE
Leah
10 months ago
Really? I thought it could be a phishing attempt too.
CY
Cyndy
11 months ago
Seems obvious, but some might fall for it.
BE
Bernadine
11 months ago
Wait, are we sure it's not a Trojan horse?
MI
Miriam
11 months ago
I agree, that's a classic tactic.
FR
Frederic
11 months ago
Definitely social engineering!
BE
Ben
11 months ago
I feel like I've seen something similar in a study guide, but I can't recall if it was specifically about social engineering or another type of attack.
AN
Anisha
12 months ago
This reminds me of a practice question we did about phishing, which is a type of social engineering. So I guess A is the right answer?
YU
Yuette
12 months ago
I'm not entirely sure, but I remember something about replay attacks being related to capturing credentials. Is that relevant here?
EL
Elliot
12 months ago
I think this is definitely a case of social engineering since the email is trying to trick John into giving away his credentials.
SA
Samuel
12 months ago
Okay, let me break this down step-by-step. The email is asking for sensitive login information, which goes against company policy. That points to a social engineering attack, so I'll go with option A. Gotta stay focused and not overthink these questions.
IV
Ivette
12 months ago
Wait, I'm a bit confused. Couldn't this also be a replay attack, where the attacker is trying to reuse the login information? I'll have to review the differences between these attack types to make sure I choose the right one.
CR
Crissy
12 months ago
Easy peasy! The email is clearly trying to trick the user into revealing their login credentials, so social engineering is the right answer here. I'm confident I've got this one nailed down.
ER
Erick
1 year ago
Hmm, I'm a little unsure about this one. Could it also be a Trojan horse attack since the email is trying to get the user to disclose sensitive information? I'll have to think this through carefully.
BU
Burma
1 year ago
This one seems pretty straightforward. The email asking for the login ID and password is a classic social engineering attack, so I'll go with option A.
JO
Jose
1 year ago
Okay, let's see here. Connecting to the same network hub or switch as the AP doesn't sound right, that's more for wired networks. Configuring a certificate authority also doesn't seem relevant for a basic wireless setup. I'm pretty confident the answer is B, but I'll double-check my notes just to be sure.
NO
Noelia
1 year ago
My notes mention that reading the requirements is important too, but it might not provide direct evidence of reliability. I'm torn between that and comparing to an emulator.
GA
Garry
1 year ago
Okay, first I'll calculate the net time per record by adjusting for the fatigue factor. 2.50 * 1.15 = 2.875 minutes per record.
LA
Lashandra
1 year ago
This seems like a straightforward question about the key elements of a security policy. I'm pretty confident I can identify the correct answers.
DO
Dorinda
1 year ago
Hmm, I'm a bit confused by this question. I'm not sure if the Identity Governance blade or the Set-AzureAdUser cmdlet would be the right approach here. I'll need to review the details more carefully.
RO
Roosevelt
1 year ago
Okay, let me review the key characteristics of each type of verbal response. That should help me determine the right answer.
BA
Basilia
1 year ago
Definitely a social engineering attack. The manager should know better than to ask for login credentials via email. Maybe they need a refresher on security best practices.
KA
Kanisha
1 year ago
B) DoS
JU
Julio
1 year ago
I agree, that's definitely a social engineering attack.
WA
Wai
1 year ago
A) Social engineering
HE
Herminia
1 year ago
Haha, the manager must have lost his login info and is trying to get John's. Nice try, but John is too smart for that!
RO
Rosio
1 year ago
C) Trojan horse
NO
Nobuko
1 year ago
B) DoS
ME
Mee
1 year ago
A) Social engineering
TA
Talia
1 year ago
I'm not sure. It could also be a Trojan horse attack if the manager's email is compromised. Better to be safe and not click any links or attachments in the email.
LI
Lisbeth
1 year ago
I agree, this is a social engineering attack. John is right to follow the company policy and not disclose his login information.
LA
Lavonda
1 year ago
It's always best to be cautious when it comes to sharing login information, you never know who might be trying to access it.
ME
Meaghan
1 year ago
Social engineering attacks can be very deceptive, it's good that John is aware of the risks.
CA
Carlota
1 year ago
Exactly, following company policy is important to prevent security breaches.
LA
Lavonna
1 year ago
John should not provide his login information, it could be a social engineering attack.
JO
Joana
1 year ago
It's important for John to follow company policy and not disclose his logon ID and password.
SA
Sage
2 years ago
I agree, the Manager is trying to trick John into giving away sensitive information.
AD
Adelina
2 years ago
This is clearly a social engineering attack. The manager is trying to trick John into revealing his login credentials, which is a classic social engineering tactic.
SH
Shelton
1 year ago
It's not a replay attack, it's social engineering.
DO
Dorian
1 year ago
D) Replay attack
EL
Ellsworth
1 year ago
Not a Trojan horse, but a social engineering attack.
EL
Eladia
1 year ago
C) Trojan horse
SH
Shaun
1 year ago
No, it's not a denial of service attack.
NI
Nieves
1 year ago
B) DoS
JO
Johnson
1 year ago
That's right, the manager is trying to trick John into revealing his login credentials.
DE
Devorah
1 year ago
A) Social engineering
WE
Werner
2 years ago
That's definitely social engineering.