Dave has been assigned to test the network security of Acme Corp. The test was announced to the employees. He created a webpage to discuss the progress of the tests with employees who were interested in following the test. Visitors were allowed to click on a sand clock to mark the progress of the test. Dave successfully embeds a keylogger. He also added some statistics on the webpage. The firewall protects the network well and allows strict Internet access. How was security compromised and how did the firewall respond?
A.
The attack was deception and security was not directly compromised
B.
Security was not compromised as the webpage was hosted internally
C.
The attack was social engineering and the firewall did not detect it
D.
The attack did not fall through as the firewall blocked the traffic
Explanation:
This was just another way to trick the information out of the users without the need to hack into any systems. All traffic is outgoing and initiated by the user so the firewall will not react.