Social Engineering

Question 1

Spoofing

Answer 1

This is a human-based or software-based attack where the goal is to pretend to be someone else

Question 2

Shoulder surfing

Answer 2

Goal is to look over the shoulder

Question 3

Impersonation

Answer 3

Human attack when the attacker pretends to be someone he is not

Question 4

Hoax

Answer 4

Email-based or web-based attack intended to trick the user into performing undesired actions

Question 5

Phishing

Answer 5

email-based attempt to get financial information

Question 6

Vishing

Answer 6

Human-based. goal is to extract personal, financial, confidential information

Question 7

Whaling

Answer 7

form of phishing that targets individuals known to possess a good deal of wealth

Question 8

Spam/spim

Answer 8

Social networking based; Spim is internet messaging attack

Question 9

Zero day attack

Answer 9

Exploits a previously unknown vulnerability in an application of OS

Question 10

Brute force attack

Answer 10

Uses password-cracking software to try possible combination

Question 11

Dictionary attack

Answer 11

Automates password guessing by comparing encrypted passwords

Question 12

Eavesdropping or Sniffing attack

Answer 12

Special monitoring software to intercept private network communications; aimed at content or passwords

Question 13

Man-in-the-middle

Answer 13

Attacker redirects traffic between two victims to capture information between the sender and receiver; could result in hijacker

Question 14

Zombies

Answer 14

Attacker introduces unauthorized software that directs the devices to launch and attack. Distributed Denial of Service (DDoS) attacks: collection of devices taken over by an attacker.

Question 15

Botnets

Answer 15

Distributed Denial of Service (DDoS) attacks: A collection of internet-connected programs communicating with other similar programs in order to perform tasks that can be used to send spam email or participate in DDoS attacks.