Chapter 1.1

Question 1

Using deceptive communication to fool people into revealing sensitive information.

Answer 1

Phishing

Question 2

A more targeted form of phishing using inside information. Usually appears to come from a known associate.

Answer 2

Spear Phishing

Question 3

Spear phishing a high value target, such as a CEO or CFO.

Answer 3

Whaling

Question 4

A lie used to gain information?

Answer 4

Pretext

Question 5

Adding character(s) to the beginning or end of a URL.

Answer 5

Prepending

Question 6

Unauthorized registration of a domain name.

Answer 6

Cybersquatting

Question 7

Cybersquatting using a mistyped URL.

Answer 7

Typosquatting

Question 8

Redirecting a legitimate URL to a bogus site.

Answer 8

Pharming

Question 9

Phishing over voice mail.

Answer 9

Vishing

Question 10

Phishing over SMS.

Answer 10

Smishing

Question 11

Gathering information on a victim.

Answer 11

Reconnaissance

Question 12

Pretending to be someone you are not.

Answer 12

Impersonation

Question 13

Evoke or draw out information from someone in reaction to one’s own action?

Answer 13

Elicit

Question 14

Opening an account in someone else’s name, such as a credit card.

Answer 14

Identity Fraud

Question 15

Gathering important information thrown out with the trash.

Answer 15

Dumper Diving

Question 16

Gathering information by looking at someone’s screen directly without them knowing.

Answer 16

Shoulder Surfing

Question 17

A threat that doesn’t exist but seems like it could be real.

Answer 17

Hoax

Question 18

Targeting a 3rd-party site that victims commonly visit.

Answer 18

Watering Hole Attack

Question 19

Unsolicited messages.

Answer 19

Spam

Question 20

Intentionally slowing down sever traffic by flooding it with messages.

Answer 20

Tarpitting

Question 21

Taking action to sway public opinion on political and social issues.

Answer 21

Influence Campaign

Question 22

Following an authorized person to gain access to a place.

Answer 22

Tailgating

Question 23

Sending a fake bill for a company to pay.

Answer 23

Invoice Scam

Question 24

Gathering of usernames and passwords either stored on a computer or written down.

Answer 24

Credential Harvesting or Password Harvesting

Question 25

What are the 7 social engineering principles? Hint: FAST_ICU

Answer 25

Familiarity, Authority, Scarcity, Trust, Intimidation, Consensus, Urgency