GIAC GSLC Exam - Topic 3 Question 26 Discussion

Actual exam question for GIAC's GSLC exam

Question #: 26
Topic #: 3

[All GSLC Questions]

John works as an IT Technician for Company Inc. One morning, John receives an e-mail from the company's Manager asking him to provide his logon ID and password, but the company policy restricts users from disclosing their logon IDs and passwords. Which type of possible attack is this?

ASocial engineering

BDoS

CTrojan horse

DReplay attack

Show Suggested Answer

Suggested Answer: A

by Stephen at May 03, 2022, 08:06 AM

Limited Time Offer

25%

Off

Get Premium GSLC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Royal

4 months ago

This is a huge red flag for security protocols!

upvoted 0 times

...

Reynalda

4 months ago

No way, it's clearly social engineering.

upvoted 0 times

...

Niesha

4 months ago

Wait, are we sure it's not a Trojan horse? Seems a bit off.

upvoted 0 times

...

Lynelle

4 months ago

I agree, it's all about tricking people into giving info.

upvoted 0 times

...

Dallas

5 months ago

Definitely social engineering! Classic tactic.

upvoted 0 times

...

Maurine

5 months ago

I agree with social engineering, but I wonder if there are any nuances in how it's presented in the question.

upvoted 0 times

...

Glory

5 months ago

I'm a bit confused; could it also be considered a phishing attempt? I feel like they overlap sometimes.

upvoted 0 times

...

Benedict

5 months ago

I remember practicing a question like this in class, and it was about social engineering too. It makes sense since the manager shouldn't be asking for that info.

upvoted 0 times

...

Marion

5 months ago

I think this is definitely related to social engineering, but I'm not entirely sure if there are other types of attacks that could fit.

upvoted 0 times

...

Denny

5 months ago

I feel pretty confident about this one. The RDS Proxy solution seems like the most straightforward way to address the connection issues without having to make significant changes to the existing application. I'll focus on understanding how RDS Proxy works and why it's the best fit for this scenario.

upvoted 0 times

...

Devora

5 months ago

I think commercial paper has a maturity of less than a year, so I'm not sure if option A is correct.

upvoted 0 times

...

Brandon

5 months ago

Hmm, I think I read that blockchain is best for specific use cases like finance and supply chain, not all databases. So, I'm leaning towards "False."

upvoted 0 times

...