Comprehensive and Detailed Explanation:
Social engineering is a psychological manipulation technique used by attackers to trick individuals into divulging confidential or personal information that may be used for fraudulent purposes.
It relies on human interaction and may involve tactics such as:
Impersonation
Pretexting
Phishing
Baiting
Rather than attacking systems directly, attackers exploit human trust and error.
From CEH v13 Courseware:
Module 7: Social Engineering
Reference:CEH v13 Study Guide - Module 7: Human-Based and Computer-Based Social Engineering

A demilitarized zone (DMZ) is a buffer zone between a trusted internal network and an untrusted external network (usually the internet). Public-facing services like web servers, email servers, and DNS servers are typically placed in the DMZ. These nodes can be accessed from the internet, but the DMZ design ensures that unauthorized access to the internal network is blocked or highly restricted.
The purpose is to provide access to certain systems without exposing the internal network directly.
Reference:
CEH v13 eCourseware - Module 02: Footprinting and Reconnaissance # Network Topologies and Firewalls CEH v13 Study Guide - Chapter: Network Architecture Security # "Understanding DMZ Configuration"

The preparation phase of incident handling is the proactive phase where organizations:
Develop and define incident response policies and rules
Assign roles and responsibilities
Design backup and disaster recovery strategies
Train staff and test response plans via drills or tabletop exercises
This phase ensures that the organization is ready to respond effectively when an incident occurs.
Reference - CEH v13 Official Study Guide:
Module 18: Incident Response and Computer Forensics
Quote:
"In the preparation phase, organizations define rules, set up an incident response team, perform training, and establish and test incident handling procedures." Incorrect Options:
B). Containment is about stopping the spread of an active incident
C). Identification is when the incident is first detected
D). Recovery is for restoring systems post-incident

File system permissions
Processes may automatically execute specific binaries as part of their functionality or to perform other actions. If the permissions on the file system directory containing a target binary, or permissions on the binary itself, are improperly set, then the target binary may be overwritten with another binary using user-level permissions and executed by the original process. If the original process and thread are running under a higher permissions level, then the replaced binary will also execute under higher-level permissions, which could include SYSTEM.
Adversaries may use this technique to replace legitimate binaries with malicious ones as a means of executing code at a higher permissions level. If the executing process is set to run at a specific time or during a certain event (e.g., system bootup) then this technique can also be used for persistence.