Question
An incident response analyst notices multiple emails traversing the network that target only the administrators of the company. The email contains a concealed URL that leads to an unknown website in another country. Which of the following best describes what is happening? (Choose two.)
- A. Beaconing
- B. Domain Name System hijacking
- C. Social engineering attack Correct
- D. On-path attack
- E. Obfuscated links Correct
- F. Address Resolution Protocol poisoning
Explanation
Emails aimed only at administrators that try to lure them to a malicious site are a targeted social engineering attack (spear phishing). A concealed URL that hides its real destination is an obfuscated link. Beaconing is periodic outbound traffic from an already infected host, and DNS hijacking, on-path attacks and ARP poisoning tamper with network traffic or name resolution, none of which the emails themselves show.
