Câu 5: CAS-003: CompTIA Advanced Security Practitioner (CASP) CAS-003

A penetration tester has been contracted to conduct a physical assessment of a site. Which of the following is the MOST plausible method of social engineering to be conducted during this engagement?

1. A. Randomly calling customer employees and posing as a help desk technician requiring user password to resolve issues — đáp án hiện tại
2. B. Posing as a copier service technician and indicating the equipment had ג€phoned homeג€ to alert the technician for a service call
3. C. Simulating an illness while at a client location for a sales call and then recovering once listening devices are installed
4. D. Obtaining fake government credentials and impersonating law enforcement to gain access to a company facility