58. Which of the following techniques would attract the attention of a malicious attacker in an insider threat scenario?
Answer: A
Creating a false text file in /docs/salaries would attract the attention of a malicious attacker in an insider threat scenario.
Creating a false text file in /docs/salaries is likely to raise suspicion due to the sensitive nature of salary information, making it a target for malicious insiders.
A) Creating a false text file in /docs/salaries
This option is correct because a file containing fabricated salary information could be seen as an attempt to mislead or manipulate data, which would attract the attention of a malicious insider. Such a scenario is particularly concerning in organizations where salary data is sensitive, as it might indicate potential fraud or data tampering.
B) Setting weak passwords in /etc/shadow
While setting weak passwords is a security risk, it may not directly attract the attention of a malicious insider unless it is exploited. This action generally goes unnoticed until an unauthorized access attempt occurs, making it less likely to be a point of concern in an insider threat context.
C) Scheduling vulnerable jobs in /etc/crontab
Scheduling vulnerable jobs could be a tactic used by an insider, but it may not immediately attract attention unless those jobs become evident in execution logs. This option lacks the overtly suspicious nature of manipulating salary information, which is more likely to be scrutinized.
D) Adding a fake account to /etc/passwd
Adding a fake account could be a sign of malicious intent, but it may not be immediately visible unless specifically checked by system administrators. This action could potentially go unnoticed for a longer time, making it a less effective method of attracting attention compared to creating a false file with sensitive information.
Conclusion
Creating a false text file in /docs/salaries is the most effective technique for attracting the attention of a malicious attacker in an insider threat scenario due to its direct implications on sensitive data integrity. Other options, while potentially harmful, do not exhibit the same level of immediate and public concern as manipulating salary information does, thereby making them less likely to provoke a response.