Discuss WGU Network And Security Foundation (D315) Exam Topic 1 Question 8

An organization is the victim of an attack in which an attacker uses a forged employee ID card to deceive a company employee into providing sensitive information.

What is the type of cyberattack described in this scenario?

ABrute-force attack

BMan-in-the-middle attack

CSocial engineering

DPharming

Suggested Answer: C

Social engineering involves manipulating people into divulging confidential information, often by impersonation, deception, or psychological tactics. Using a forged ID card to gain trust and extract sensitive information is a classic example of social engineering.

Brute-force attack attempts to guess passwords through automated methods.

Man-in-the-middle attack intercepts communication but does not rely on deception.

Pharming tricks users into visiting fraudulent websites but does not involve impersonation.

Get Premium Network and Security Foundation (D315) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Viola 3 months ago

Definitely C. They exploit trust to get sensitive info. Very dangerous!

Eric 3 months ago

Agreed! The attacker deceives the employee. Classic social engineering tactic.

Alberto 3 months ago

I think it's C) Social engineering. It's all about manipulation.

Lashawnda 3 months ago

100% agree, social engineering is the right answer!

Tricia 3 months ago

Wait, are we sure it’s not pharming? Seems a bit off.

Kenneth 4 months ago

This is classic social engineering, no doubt about it.

Alyssa 5 months ago

I thought it was a man-in-the-middle attack at first.

Martina 5 months ago

Definitely a social engineering attack!

Suzan 6 months ago

I agree with the others; it sounds like social engineering. The forged ID card is a classic tactic to trick someone into revealing sensitive info.

Jenelle 6 months ago

I'm a bit confused because I thought social engineering was more about phishing emails. But this scenario feels like it fits that category too.

Shoshana 6 months ago

I remember practicing a question like this where someone used deception to gain access. I think it was definitely social engineering, option C.

Sunshine 6 months ago

I think this might be a social engineering attack, but I'm not entirely sure. It seems like the attacker is manipulating someone to get information.

WGU Network and Security Foundation (D315) Exam - Topic 1 Question 8 Discussion