1 - 4: Social Engineering Attacks

Question 1

Social engineering

Answer 1

Manipulating people into divulging information or performing an action that undermines security

Question 2

Main reasons social engineering is successful

Answer 2

Authority, Intimidation, Consensus, Scarcity, Urgency, Familiarity

Question 3

Phishing

Answer 3

Soliciting valuable information or credentials using social engineering techniques through email

Question 4

Spear Phishing

Answer 4

Targeting phishing attempts by adopting names, language, and terms familiar to the target

Question 5

Spam

Answer 5

Unsolicited Commercial Email

Question 6

Whaling

Answer 6

Spear phishing attacks aimed at organization executives

Question 7

Pharming

Answer 7

A false website which appears like a legitimate one designed to prompt users attempting to access a real site

Question 8

Vishing

Answer 8

Voice phishing by calling unsuspecting victims, posing as helpdesk or requesting a website visit

Question 9

Smishing

Answer 9

Phishing sent through instant messaging services

Question 10

Spoofing

Answer 10

Faking an identity when sending phishing

Question 11

Pretexting

Answer 11

Contacting a third party vendor impersonating a legitimate customer

Question 12

Watering hole

Answer 12

Compromising a commonly used website, bundling in a botnet, adding malware, then waiting for infected systems to contact

Question 13

Shoulder surfing

Answer 13

Looking over a victim’s shoulder to find confidential information

Question 14

Dumpster diving

Answer 14

Looking for sensitive information in trash

Question 15

Tailgating

Answer 15

Following someone with access to take advantage of their entry