1.4 Social Engineering Attacks

Question 1

Linda’s organization recently experienced a social engineering attack.
The attacker called a help desk employee and persuaded her that she was a project manager on a tight deadline and locked out of her account.
The help desk technician provided the attacker with access to the account.
What social engineering principle was used?

• Social Proof
• Authority
• Urgency
• Scarcity

Answer 1

Urgency

Question 2

In what type of social engineering attack does the attacker physically observe the victim’s activity?

• Shoulder Surfing
• Tailgating
• Dumpster Diving
• Phishing

Answer 2

Shoulder Surfing

Question 3

What type of website does the attacker use when waging a watering hole attack?

• Software distribution site
• Site trusted by the end user
• Hacker forum
• Known malicious site

Answer 3

Site trusted by the end user

Question 4

In what technique do attackers pose as their victim to elicit information from third parties?

• Spoofing
• Pretexting
• Skimming
• Phishing

Answer 4

Pretexting

Question 5

What type of phishing attack focuses specifically on senior executives of a targeted organization?

• Pharming
• Spear Phishing
• Vishing
• Whaling

Answer 5

Whaling