Exercise 1: Why Support Technicians Are a "Primary" Target — Possible Solution ==================================================================== WHAT THIS CHAPTER SAYS ------------------------------ Per this chapter, "attackers know that a busy person trying to be helpful is often an easier target than the system they're actually trying to reach." Support technicians sit specifically at the point where a request for access, information, or a reset is expected to be granted quickly, by design - that's the job. WHY "EASIER TARGET" MEANS PRIMARY, NOT JUST ONE AMONG MANY ------------------------------ A technical system (a server, an application, a firewall) has to be found, probed, and exploited - each step takes real effort and can fail. A support technician, by contrast, already has the access an attacker wants, is trained to be responsive, and is routinely asked to act on requests from people they've never met. That combination - real access, plus a professional norm of helpfulness under time pressure - makes the support role the single most efficient path in, not merely a possible one among several equally likely paths. THE ROLE OF THE JOB ITSELF ------------------------------ This isn't a criticism of support technicians - it's a direct consequence of what the job requires. Being fast and helpful is exactly the behavior the role is built around, and it's precisely that behavior a social engineer is counting on being able to exploit. The chapter frames this as "everyone's first job" specifically because the role's own core competency doubles as its own attack surface. WHY THIS WORKS AS AN ANSWER ------------------------------ It explains the specific reasoning the chapter gives (ease of access plus a professional norm of speed), and explains why that combination makes support technicians the single most efficient target rather than just one target among equally likely others.