Social Engineering

Question 1

Broad range of malicious activities accomplished through human interaction. Any attempt to manipulate users to reveal confidential information or perform actions detrimental to a system’s security.

Answer 1

Social Engineering

Question 2

A social engineering attack where the malicious actor communicates with the victim from a supposedly reputable source to lure the victim into divulging sensitive information

Answer 2

Phishing

Question 3

Uses the same technology and techniques but is a more targeted version of phising

Answer 3

Spear phishing

Question 4

Focused on key executives within an organization or other key leaders, executives, and managers in the company

Answer 4

Whaling

Question 5

The text message service component on cellphones, smartphones, tablets, and other mobile devices
A form of text messaging that also allows pictures, sounds, or videos to be sent

Answer 5

Smishing –
Short Message Service (SMS)
Multimedia Messaging Service (MMS)

Question 6

Occurs when the message is being communicated to the target using the voice functions of a telephone

Answer 6

Vishing

Question 7

Occurs when an attacker takes over a high-level executive’s email account and orders employees to conduct tasks

Answer 7

Business Email Compromise (BEC)

Question 8

Tricks users into divulging private information by redirecting a victim to a website controlled by the attacker or pen tester

Answer 8

Pharming

Question 9

The abuse of the electronic messaging systems, most commonly through email

Answer 9

Spam

Question 10

The act of pretending to be someone else in order to gain access or gather information

Answer 10

Impersonation

Question 11

A fraudulent Wi-Fi access point that appears to be legitimate but is set up to eavesdrop on wireless communication

Answer 11

Evil Twin (Rogue Access Point)

Question 12

Type of evil twin attack that exploits the behavior of Wi-Fi devices due to a lack of access point authentication protocols being implemented

Answer 12

Karma Attack

Question 13

A list of the SSIDs of any access points the device has previously connected to and will automatically connect to when those networks are in range

Answer 13

PNL (Preferred Network List)

Question 14

A web page that the user of a public-access network is obligated to view and interact with before access is granted

Answer 14

Captive Portal