ヘルプ デスク技術者は、組織のサイバーセキュリティ インシデント対応チームの一員であると主張する人物から電話を受けました。発信者は技術者に、ネットワークの内部ファイアウォール IP アドレスを確認するように依頼します。技術者の最善の行動は次のうちどれですか?
正解:C
This is the best course of action for the help desk technician because it can help prevent a potential social engineering attack. Social engineering is a technique that involves manipulating or deceiving people into revealing sensitive information or performing actions that compromise security. The caller may be impersonating a member of the organization's cybersecurity incident response team to obtain the network's internal firewall IP address, which could be used for further attacks. The help desk technician should not provide any information over the phone without verifying the caller's identity and authorization. The help desk technician should also report the incident to the organization's cybersecurity officer for investigation and response. References: https://www.comptia.org/blog/social-engineering-explained https://www.certblaster.com/wp-content/uploads/2020/11/CompTIA-Security-SY0-601-Exam-Objectives-1.0.pd