An employee from the fire Marshall’s office arrives to inspect the data center. The operator allows
him to bypass the multi-factor authentication to enter the data center. Which of the following types
of attacks may be underway?
A.
Impersonation
B.
Hoax
C.
Tailgating
D.
Spoofing
This has to be impersonation, surely?
0
0
Surely you can’t be serious?
I am serious, and don’t call me Shurley
0
0
Bad question. This could be A or C. The question asks which one “may” be underway. If the person is not actually the fire marshall, then this would be impersonation. However, they would then be tailgating the operator when entering the door without going through the multifactor authentication themselves.
0
0
Trick question. An employee from the Fire Marshall’s office is inspecting the data center. No attacks are under way.
0
0
I think its A. The keyword for me is “may”. It says the the operator allowed him to pass the multi-factor authentication. Not he might of let him pass. Regardless if he had good or bad intent the operator let him tailgate. What we don’t know, is if he is impersonating a Fire Marshall. He “may” be, we don’t know. This is a difficult trick question.
1
0
The operator allowed him to bypass the multi-factor. It is hard question but yourself in the operator place, what do you see first? I see an employee from the fire Marshall’s office (or somebody that pretends it is an employee of the fire…), this means first is impersonation and then tailgating.
0
0
PROCESS OF ELIMINATION:
B- It is not a hoax, as this is a physical intrusion
D- It is not a spoofing, as this is a physical intrusion
So it is a toss-up between A and C
** If the guy has been invited, then it cannot be really considered “an attack” as such.
** But if he was not invited and showed up out of the blue, then we certainly have an issue of probable impersonation.
** Since the person is being escorted, it cannot then be tailgating
So the best answer is A
0
0