CompTIA Security+ (SY0-601) — Question 617

An employee finds a USB flash drive labeled "Salary Info" in an office parking lot. The employee picks up the USB flash drive, goes into the office, and plugs it into a laptop. Later, a technician inspects the laptop and realizes it has been compromised by malware. Which of the following types of social engineering attacks has occurred?

Answer options

• A. Smishing
• B. Baiting
• C. Tailgating
• D. Pretexting

Correct answer: B

Explanation

The correct answer is B, baiting, as it involves enticing someone to engage with malicious media, such as a USB drive, which leads to a security breach. Smishing refers to phishing through SMS messages, tailgating involves unauthorized physical entry, and pretexting is about creating a fabricated scenario to obtain information, none of which apply to this situation.