Question 70
At the Yorkport payments platform, an accounts team accepts a surprise supplier bank change from an email reply thread. Which explanation best accounts for the concern?
Explanation
Correct Answer
The problem stems from the fact that a compromised mailbox can make fraudulent instructions appear legitimate. A correct solution would use verified out-of-band callback and dual approval for payment destination changes and check that a simulated bank-account amendment is rejected until separate approved verification completes.
Incorrect Answers
The offered principle is: Relayable passwords and one-time codes can be replayed by an adversary in real time. In the source material it is associated with: Relayable passwords and one-time codes can be replayed by an adversary in real time. This case has a different controlling cause: A compromised mailbox can make fraudulent instructions appear legitimate. Its keyed mechanism is: A compromised mailbox can make fraudulent instructions appear legitimate.
The offered principle is: Fast unsalted hashing enables rapid offline guessing and reveals password reuse. In the source material it is associated with: Fast unsalted hashing enables rapid offline guessing and reveals password reuse. This case has a different controlling cause: A compromised mailbox can make fraudulent instructions appear legitimate. Its keyed mechanism is: A compromised mailbox can make fraudulent instructions appear legitimate.
Volumetric traffic exhaustion occurs before ordinary application authentication. That may occur elsewhere, but the evidence at the Yorkport payments platform instead points to the fact that a compromised mailbox can make fraudulent instructions appear legitimate.