Question 371
An energy infrastructure company in Tulsa, Oklahoma initiated a controlled phishing simu-lation targeting multiple operational departments.
The test email claimed to originate from the corporate compliance office and instructed employees to
"complete a mandatory regulatory update within the next 30 minutes to avoid account suspension." The message used a broad salutation instead of employee names and lacked the standard corporate signature footer normally appended to official communications.
Additionally, security analysts observed that the embedded hyperlink displayed the organization's domain in the message body; however, when examined more closely, the actual destination resolved to a shortened external URL redirecting to an unrelated host.
From a defensive analysis standpoint, which indicator provides the strongest technical validation that the message is malicious?
The test email claimed to originate from the corporate compliance office and instructed employees to
"complete a mandatory regulatory update within the next 30 minutes to avoid account suspension." The message used a broad salutation instead of employee names and lacked the standard corporate signature footer normally appended to official communications.
Additionally, security analysts observed that the embedded hyperlink displayed the organization's domain in the message body; however, when examined more closely, the actual destination resolved to a shortened external URL redirecting to an unrelated host.
From a defensive analysis standpoint, which indicator provides the strongest technical validation that the message is malicious?
Question 372
Which of the following antennas is commonly used in communications for a frequency band of 10 MHz to VHF and UHF?
Question 373
Stephen, an attacker, targeted the industrial control systems of an organization. He generated a fraudulent email with a malicious attachment and sent it to employees of the target organization.
An employee who manages the sales software of the operational plant opened the fraudulent email and clicked on the malicious attachment. This resulted in the malicious attachment being downloaded and malware being injected into the sales software maintained in the victim's system. Further, the malware propagated itself to other networked systems, finally damaging the industrial automation components. What is the attack technique used by Stephen to damage the industrial systems?
An employee who manages the sales software of the operational plant opened the fraudulent email and clicked on the malicious attachment. This resulted in the malicious attachment being downloaded and malware being injected into the sales software maintained in the victim's system. Further, the malware propagated itself to other networked systems, finally damaging the industrial automation components. What is the attack technique used by Stephen to damage the industrial systems?
Question 374
A senior attacker uses OAuth tokens stolen from browser storage to access APIs. What attack does this represent?
Question 375
What is not a PCI compliance recommendation?