Transit GIS staff open a "map update" image that later appears to h…

Question

Transit GIS staff open a "map update" image that later appears to have delivered a malicious payload through embedded content rather than a normal office document. At Security+ depth, which threat vector should analysts primarily consider?

Accepted Answer

Image-based vector — malicious content delivered via an image or image-borne technique — When the "map update" picture is the delivery truck, think image-based vector — malware or hidden content riding an image, not just a Word macro. Security+ expects awareness that images can be a channel alongside email attachments. Scan and sandbox unusual GIS media the same way you would shady documents.

Answer

Open RDP with factory-default credentials on a jump host

Answer

Pretexting a fake audit to collect building badge codes by phone

Answer

Public cloud storage left world-readable without authentication

Transit GIS staff open a "map update" image that later appears to have delivered a malicious payload through embedded content rather than a normal office document. At Security+ depth, which threat vector should analysts primarily consider?

Short Explanation

Full Explanation