Network Security - Phishing & Social Engineering

The weakest point in a security system, is usually:

• Poorly coded software

• People

• Unreliable hardware

• Poor network connections

What is PHISHING?

• Where a device is used to intercept packets of data as they are transferred across a network. This data is then analysed to look for passwords and other personal data.

• Where an executable file is secretly installed to record each key pressed and send

• Writing a snippet of code to try and retrieve data from a machine

• Sending emails pretending to be from reputable companies to try and get people to reveal personal information

True or False: Phishing is only done through email. It never uses any other messaging service.

• True

• False

Which of the following is not a social engineering technique?

• Blagging

• Hacking

• Phishing

• Pharming

Which of the following people should you share your password with when they ask?

• Network managers

• Call centre workers

• Security experts

• Company managers

• Nobody

Which of the following most closely matches the definition of 'Blagging'?

• Sending an e-mail to a user pretending to be someone else

• Hacking a person's computer

• Tricking a person into revealing some personal information

• Observing a legitimate user entering a password

• Setting up a fake website that looks like an official website

Which account should have your most secure password?

• Bank Account

• School Account

• Primary Email Account

• Social Media Account

What should you do with a found pen drive

• Look at the contents to see if you can find out who the owner is

• Look at the contents so that you can perform a cyber attack

• Nothing

• Hand it to the police

• Use it on a computer that isn't your own

What should you do with a phishing email?

• Delete it

• Contact your bank immediately

• Click the links just to be sure

• Reply and ask them to stop spamming you

If you believe an email is genuine what should you do?

• Click the link in the email

• Go to the official website in the usual way

• Call the company to check whether this is a phishing attack

• Reply to the email