Câu 313: 312-50V13: Certified Ethical Hacker v13

A penetration tester is hired by a company to assess its vulnerability to social engineering attacks targeting its IT department. The tester decides to use a sophisticated pretext involving technical jargon and insider information to deceive employees into revealing their network credentials. What is the most effective social engineering technique the tester should employ to maximize the chances of obtaining valid credentials without raising suspicion?

1. A. Create a convincing fake IT support portal that mimics the company’s internal systems
2. B. Send a generic phishing email with a malicious attachment to multiple employees
3. C. Visit the office in person as a maintenance worker to gain physical access to terminals
4. D. Conduct a phone call posing as a high-level executive requesting urgent password resets — đáp án hiện tại