Question $12$

An employee reported seeing an individual outside the office drop a few thumb drives. The

emplovee grabbed those devices and brought them to the information technology $($IT$)$

department. After conducting forensics on the devices using air$-$gapped machines, the IT

team determined that the individual was trying to trick employees into plugging the devices

into their computers to steal information. What was the malicious actor attempting on an

unsuspecting employee?

The actor used an email lure.

The actor tried to improve the company's security posture.

The actor used a physical lure.

The actor was not being malicious.