1.1

Question 1

What is an attack characterized by the attacker trying to get the victim to click on a link or log-in to an illegitimate website?

Answer 1

PhishingPhishing

Question 2

What is an attack characterized by the attacker trying to exploit the victim via text message?

Answer 2

Smishing

Question 3

What is an attack characterized by the attacker trying to exploit the victim via a phone call or What is an attack characterized by the attacker trying to exploit the victim via a phone call or voicemail??

Answer 3

Vishing

Question 4

An attack that is focused on a large group rather than an individual within the group

Answer 4

Pharming

Question 5

An attack that is characterized by creating a false URL that is almost identical to a legitimate URL, except it has an extra letter in the beginningPrepending

Answer 5

Prepending

Question 6

The process of the attacker gathering information about the victim

Answer 6

Reconnaissance

Question 7

An attack that is characterized by creating a fake URL that is very similar to a legitimate URL, except it has an easy-to-miss misspelling.

Answer 7

Typosquatting

Question 8

An attack that involves setting up the scenario by lying to the victim

Answer 8

Pretexting

Question 9

____________ is a common causation of a pharming attack.

Answer 9

Poisoned DNS server

Question 10

Poisoned DNS server

Answer 10

Caller ID Spoofing

Question 11

A targeted attack with inside information that makes the attacker more believable.

Answer 11

Spear phishing

Question 12

An attack characterized by the attacker faking to be someone they aren’t.

Answer 12

Impersonation

Question 13

The process of an attacker extracting information from the victim.

Answer 13

Eliciting information

Question 14

An attack where the victim’s identity has been exploited.

Answer 14

Identity fraud

Question 15

3 types of identity fraud

Answer 15

Credit card fraud
Bank fraud
Loan fraud

Question 16

An attack characterized by the attacker gaining information about the victim by going through their trash.

Answer 16

Dumpster diving

Question 17

An attack characterized by the attacker gaining information by looking at the victim’s computer screen without the victim’s knowledge.

Answer 17

Shoulder surfing

Question 18

A threat that seems real, but isn’t real.

Answer 18

Hoax

Question 19

A third party location or website that attackers exploit in hopes that their target victims will use the location/website and become infected.

Answer 19

Watering Hole Attack

Question 20

Unsolicited messages that likely could infect a user if interacted with.

Answer 20

Spam

Question 21

Spam that is received through a messaging platform.

Answer 21

Spam over instant messaging (SPIM)

Question 22

The Influence Process

Answer 22

Fake users create content > post to social media > amplify the message > real users see and share the message > Mass media picks up the story and spreads it everywhere

Question 23

A type of influence campaign that involves changing the way other people think through technology (i.e. cyberwarfare)

Answer 23

Hybrid Warfare

Question 24

When an unauthorized individual enters a secure area by following someone through a secured door.

Answer 24

Tailgating

Question 25

An attack where the attacker focuses on the individual that handles financial transactions.

Answer 25

Invoice scams

Question 26

An attack that involves the attacker attempting to access the victim’s login information via. the computer’s storage system.

Answer 26

Credential harvesting

Question 27

An attack where the attacker specifically targets an important individual that has access to a lot of important information.

Answer 27

Whaling

Question 28

The role of authority in social engineering.

Answer 28

The attacker pretends to be someone important to pressure the victim into giving up important information.

Question 29

The role of intimidation in social engineering.

Answer 29

The attacker threatens the victim in order to gain access to important information.

Question 30

The role of consensus in social engineering.

Answer 30

The attacker tries to convince the victim that what they are requesting is normal/no big deal.

Question 31

The role of scarcity & urgency in social engineering.

Answer 31

The attacker indicates that the information must be given or the change must be made before it’s too late.

Question 32

The role of familiarity & trust in social engineering.

Answer 32

The attacker tries to be friendly with the victim to the point where the victim trusts them.