Impersonation 2.2

Question 1

Impersonation

Answer 1

• Attacker assumes a role that is recognized by the person.
• The attacker uses the potential victim’s biases against their better judgement to follow procedures.

Question 2

Ways for Impersonation

Answer 2

• Third parties, help desk operators, from vendors, or online sources.

Question 3

Eliciting Information

Answer 3

• The goal of any social engineering attack.
• Attackers uses a wide range of psychological techniques to convince people to perform tasks resulting in security compromises.

Question 4

Identity Fraud

Answer 4

• Use of fake credentials to achieve an end.
• Can be high risk or lower risk`

Question 5

Defense Against Identity Fraud

Answer 5

• Use strong policies and procedures with exceptions.
• No exception to disclosure policies.

Question 6

Protection Against Identity Fraud

Answer 6

• Never volunteer information.
• Don’t disclose personal details.
• Always verify before revealing info.
• Verification should be encouraged.