Access Control

Question 1

Phishing

Answer 1

Phishing is a type of social engineering with the goal of obtaining personal information, credentials, credit card number, or financial data.

Question 2

Pharming

Answer 2

Pharming redirects a victim to a seemingly legitimate yet fake website. In this attack, the attacker carries out DNS poisoning, in which a DNS server resolves a host name into an incorrect IP address.

Question 3

Microprobing

Answer 3

Microprobing is an invasive attack used on smart cards where the card’s surface is exploited in order to alter the integrated circuit. The protective coating on the card’s circuits is stripped away and the attacker taps directly into the circuit.

Question 4

Data Remanence

Answer 4

Data remanence is a security vulnerability that exists when used computing devices are not properly sanitized.