Exam 312-50v11 topic 1 question 70 discussion

Correct Answer: A Explanation/Reference: Social engineering, in the context of information security, refers to psychological manipulation of people into performing actions or divulging confidential information. A type of confidence trick for the purpose of information gathering, fraud, or system access. References: https://en.wikipedia.org/wiki/Social_engineering_(security)

Social Engineering is correct. Eavesdropping requires no technology at all in most cases.

For me B Eavesdropping still requires some technical skills to know how to use the heard information

Social engineering is a technique that relies on manipulating individuals into divulging confidential information or performing actions that compromise the security of a system. It often involves psychological manipulation and deception to trick people into revealing sensitive information, such as passwords or access credentials. It is considered a low-tech method because it doesn't rely on sophisticated technical skills but rather exploits human psychology and trust.

Compared to eavesdropping, social engineering can be low tech in most cases.

Everywhere I found information, including the courseware, it refers to interception of comunication between 2 devices. P. 1232: "Eavesdropping refers to an unauthorized person listening to a conversation or reading others’ messages. It includes the interception of any form of communication, including audio, video, or written, using channels such as telephone lines, email, and instant messaging. An attacker can obtain sensitive information such as passwords, business plans, phone numbers, and addresses." https://www.fortinet.com/resources/cyberglossary/eavesdropping https://www.investopedia.com/terms/e/eavesdropping-attack.asp https://www.sangfor.com/glossary/cybersecurity/what-is-eavesdropping-attack-and-how-does-it-work

Voted B. Most of social engineering techniques need mid/high skills to GAIN ACCESS. For me the key is here. Eavesdropping is considered as a low-tech skill.

IT'S A

Types of Social Engineering Human-based Social Engineering Eavesdropping - Unauthorized listening of conversations, or reading of messages. (P.1227)

Answer is A - key is low tech way, which is social engineering.

Anyone with social skills can perform this type of attack

so social engineering is low tech? getting the payload? finding the vulnerability to exploit? reconn? what the ?

Social engineering is the art of manipulating people to divulge sensitive information to use it to perform some malicious action. (p. 1201) Eavesdropping refers to an unauthorized person listening to a conversation or reading others’ messages. It includes the interception of any form of communication, including audio, video, or written, using channels such as telephone lines, email, and instant messaging. (p. 1216)

was actually leaning towards B, but A might be right

A is correct

correct

Definitely A.