Câu 110: PT0-002: CompTIA PenTest+ Certification Exam

A private investigation firm is requesting a penetration test to determine the likelihood that attackers can gain access to mobile devices and then exfiltrate data from those devices. Which of the following is a social-engineering method that, if successful, would MOST likely enable both objectives?

1. A. Send an SMS with a spoofed service number including a link to download a malicious application. — đáp án hiện tại
2. B. Exploit a vulnerability in the MDM and create a new account and device profile.
3. C. Perform vishing on the IT help desk to gather a list of approved device IMEIs for masquerading.
4. D. Infest a website that is often used by employees with malware targeted toward x86 architectures.