Week 3

Question 1

Social engineering ___________ means to masquerade as a real or fictitious character and then play out the role of that person on a victim.

Answer 1

impersonation

Question 2

_______ is sending an email or displaying a web announcement that falsely claims to be from a legitimate enterprise in an attempt to trick the user into surrendering private information.

Answer 2

Phishing

Question 3

Instead of asking the user to visit a fraudulent website, ________ automatically redirects the user to the fake site.

Answer 3

Pharming

Question 4

One type of spear phishing is whaling. Instead of going after the “smaller fish,” _______ targets the “big fish,” namely, wealthy individuals or senior executives within a business who typically would have larger sums of money in a bank account that an attacker could access if the attack is successful.

Answer 4

Whaling

Question 5

A _______ is a false warning, often contained in an email message claiming to come from the IT department.

Answer 5

Hoaxes

Question 6

The amount of spam, or unsolicited email, that goes through the Internet continues to escalate.

Answer 6

Spam

Question 6

Instead of using email to contact the potential victim, a telephone call can be used instead. Known as _________ (voice ________), an attacker calls a victim who, upon answering, hears a recorded message that pretends to be from the user’s bank stating that her credit card has experienced fraudulent activity or that her bank account has had unusual activity.

Answer 6

Vishing

Question 7

What happens when a user makes a typing error when entering a uniform resource locator (URL) address in a web browser, such as typing goggle.com (a misspelling) or google.net (incorrect domain) instead of the correct google.com? Most often today the user will be directed to a fake look-alike site.

Answer 7

Typo Squatting

Question 8

In many regions similar types of animals are known to congregate around a pool of water for refreshment.

Answer 8

Watering Hole Attack

Question 9

Just as some social engineering attacks rely on psychological manipulation, other attacks rely on physical acts.

Answer 9

Physical Procedures

Question 10

__________ involves digging through trash receptacles to find information that can be useful in an attack.

Answer 10

Dumpster Diving

Question 11

Organizations can invest tens of thousands of dollars to install specialized doors that only permit access to authorized users who possess a special card or who can enter a specific code.

Answer 11

Tailgating