C1. Answer the following questions:

C1.1: Classify the following scenario to their type of social engineering attack they represent: (1.5 Marks)

Scenario-1: Imagine receiving a phone call from a representative claiming to be conducting research for a reputable company. The representative asks a survey of questions that such as your birth date, favorite color, your banking institution and other information etc.

Scenario-2: At place of your employment, you are rushing to the door with your arm full of bags. As you approach, the man before you scans his badge to gain entrance while holding the door for you, but without asking to see your badge.

Scenario-3: Let's say you work for an organization with an excellent IT office. Your Network admin sends you an email of warning of a security breach and asking you to confirm your password by entering it into a secure website.

Scenario	Social engineering attack type
Scenario-1
Scenario-2
Scenario-3

C1.2: Classify the following attacks examples to their corresponding payload attack type.(4 Marks )

Attack	Type of attack
Overloading a server host so that it cannot respond.
MIM attack
Cutting a communication line.
SQL injection
Obtaining copies of a message.
Unauthorized change to file content change
Changing network configuration.
Adding a record to the database in unauthorized way.

C1.3: Explain how the principle of least privilege principle is implemented differently in UNIX/Linux and Windows operating system. (2 marks)