Security

Name and Last Name

1. Which kind of online attack involves pretending to be a legitimate company to get sensitive information?

• Phishing
• Impersonating
• Spyware
• Virus

2. A user within your organization received an email relating how an account containing a large sum of money has been frozen by the government of a small African nation. The user was offered a 25% share of this account if she would help the sender transfer it to a bank in the United States. The user responded to the sender and was instructed to send her bank account number so that it could be used to facilitate the transfer. She complied, and then the sender used the information to drain her bank account. What type of attack occurred?

• Man-in-the-Middle
• Eavesdropping
• Piggybacking
• Phishing

3. Derik, a user, receives an email from a popular video streaming website urging him to renew his membership. The email appears official, but Derik has never had a membership before. When he looks closer, he discovers that a hyperlink in the email points to a suspicious URL. Which of the following security threats does this describe?

• Trojan horse
• Zero-day attack
• Man-in-the-middle
• Phishing

4. What is the best countermeasure against social engineering?

• Acceptable use policy
• User awareness training
• Access auditing
• Strong passwords

5. You are a security consultant and an organization has hired you to review their security measures. They are chiefly concerned that they could become the victim of a social engineering attack. Which of the following would you MOST likely recommend they do to mitigate the risk?

• Teach users how to recognize and respond to social engineering attacks.
• Establish a written security policy.
• Implement a border firewall to filter inbound network traffic.
• Train managers to monitor user activity.

6. Which of the following is a common form of social engineering attack?

• Stealing the key card of an employee and using that to enter a secured building.
• Distributing false information about your organization's financial status.
• Hoax virus information emails.
• Using a sniffer to capture network traffic.

7. Which of the following are examples of social engineering? (Select two.)

• Shoulder surfing
• Port scanning
• War dialing
• Dumpster diving
• Brute force password cracking

8. Maintaining confidentiality in the workplace is important for building and maintaining trust and for ensuring an open and honest communication between customers, clients, and employees. Which of the following threatens data confidentiality?

• Power outages
• Man-in-the-Middle attacks
• Dumpster diving
• Replay attacks

9. You receive a call from a person who identifies himself as a technician at Microsoft. He says your computer is infected and needs to be cleaned. Which of the following is this phone call MOST likely an example of?

• Replay attack
• Snooping
• Social engineering
• Phising