Motivations, Social Engineering, and Exposure

Introduction

This lesson opens Domain 2, Threats, Vulnerabilities, and Mitigations, which carries 22% of SY0-701 and is the second-heaviest domain after Security Operations. It covers objective 2.1 (compare common threat actors and motivations), objective 2.2 (explain common threat vectors and attack surfaces) and the social engineering part of objective 2.2. Almost every scenario question on the exam starts with an attacker, a reason, and a way in. If you can identify those three elements quickly, you can usually eliminate two of four answers before you even read the options.