1 Flashcards

1
Q

A social engineering technique whereby attackers under disguise of a legitimate request attempt to gain access to confidential information is commonly referred to as:

A

Phishing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
1
Q

Which of the following answers refer to smishing? (Select 2 answers)

A
  • Social engineering technique
  • Text messaging
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

The practice of using a telephone system to manipulate user into disclosing confidential information is known as

A

Vishing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which of the following terms is commonly used to describe an unsolicited advertising message?

A

Spam

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What type of spam relies on text-based communication?

A

Spim

(SPam Instant Messaging) Unsolicited advertising appearing in instant messages. SPIM is even more annoying than spam

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Phishing scams targeting a specific group of people are referred to as:

A

Spear phishing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

In computer security, the term “Dumpster diving” is used to describe a practice of sifting through trash for discarded documents containing sensitive data. Found documents containing names and surnames of the employees along with the information about positions held in the company and other data can be used to facilitate social engineering attacks. Having the documents shredded or incinerated before disposal makes dumpster diving less effective and mitigates the risk of social engineering attacks.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

A situation in which an unauthorized person can view another user’s display or keyboard to learn their password or other confidential information is referred to as:

A

Shoulder surfing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which of the following answers refer to the characteristic features of pharming? (Select 3 answers)

A
  • Traffic Redirection
  • Fraudulent Website
  • Credential harvesting
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is tailgating?

A

Gaining unauthorized access to restricted areas by following another person

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

In social engineering, the term “Elicitation” describes the use of casual conversation to extract non-public information from people without giving them the feeling they are being interrogated.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q
  • Bracketing
    -> Providing a high and low estimate in order to entice a more specific number
  • Confidential bait
    -> Pretending to divulge confidential information in hopes of receiving
    confidential information in return
  • Deliberate false statements
    -> Saying something wrong in the hopes that the person will correct the
    statement with true information
  • Feigned ignorance
    -> Pretending to be ignorant of a topic in order to exploit the person’s tendency
    to educate
  • Denial of the obvious
    -> Saying something wrong in the hopes that the person will correct the
    statement with true information
  • Flattery
    -> Using praise to coax a person into providing information
A
  • Bracketing
    -> Providing a high and low estimate in order to entice a more specific number
  • Confidential bait
    -> Pretending to divulge confidential information in hopes of receiving
    confidential information in return
  • Deliberate false statements
    -> Saying something wrong in the hopes that the person will correct the
    statement with true information
  • Feigned ignorance
    -> Pretending to be ignorant of a topic in order to exploit the person’s tendency
    to educate
  • Denial of the obvious
    -> Saying something wrong in the hopes that the person will correct the
    statement with true information
  • Flattery
    -> Using praise to coax a person into providing information
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Phishing scams targeting people holding high positions in an organization or business are known as:

A

** Whaling **

A whaling attack is a special form of spear phishing that targets specific high-ranking victims within a company.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which of the following is used in data URL phishing?

A

** Prepending **

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

An email message containing a warning related to a non-existent computer security threat, asking a user to delete system files falsely identified as malware, and/or prompting them to share the message with others would be an example of:

A

Virus hoax

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which social engineering attack relies on identity theft?

A

Impersonation

16
Q

Which of the terms listed below refers to a platform used for watering hole attacks?

A

Websites

17
Q

The term “URL hijacking” (a.k.a. “Typosquatting”) refers to a practice of registering misspelled domain name closely resembling other well established and popular domain name in hopes of getting Internet traffic from users who would make errors while typing in the URL in their web browsers.

A

True

18
Q

An attacker impersonates a company’s managing staff member to manipulate a lower rank employee into disclosing confidential data. The attacker informs the victim that the information is essential for a task that needs to be completed within the business hours on the same day and mentions potential financial losses for the company in case the victim refuses to comply. Which social engineering principles apply to this attack scenario? (Select 3 answers)
Urgency
Authority
Intimidation

A
  • Urgency
    • Authority
    • Intimidation
19
Q

An attacker impersonating a software beta tester replies to a victim’s post in a forum thread discussing the best options for affordable productivity software. A while later, he/she follows up by sending the victim private message mentioning the discussion thread and offering free access to a closed beta version of a fake office app. Which social engineering principles apply to this attack scenario? (Select 3 answers)
Scarcity
Familiarity
Trust

A
  • Scarcity
  • Familiarity
  • Trust
20
Q

While conducting a web research that would help in making a better purchasing decision, a user visits series of Facebook pages and blogs containing fake reviews and testimonials in favor of a paid app intentionally infected with malware. Which social engineering principle applies to this attack scenario?

A

** Consensus **

21
Q

Harmful programs used to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems are commonly referred to as:

A

Malware

22
Q

Malware that restricts access to a computer system by encrypting files or locking the entire system down until the user performs requested action is known as

A

Ransomware

23
Q

A type of software that performs unwanted and harmful actions in disguise of a legitimate and useful program is known as a Trojan horse. This type of malware may act like a legitimate program and have all the expected functionalities, but apart from that it will also contain a portion of malicious code that the user is unaware of.

A

True

24
Q

A standalone malicious computer program that typically propagates itself over a computer network to adversely affect system resources and network bandwidth is called:

A

Worm