Phishing Basics

What is a common characteristic of a pharming attack?

• It involves harvesting crops

• It redirects users to a fraudulent website without their knowledge

• It sends fakes emails to users

• It is usually done via SMS messages

Which of the following is a sophisticated method used in website spoofing to deceive users?

• Using a similar but slightly different domain name

• Implementing a CAPTCHA on the spoofed site

• Using a high-quality SSL certificate

• Embedding hidden malicious scripts

In social engineering attacks, what is "pretexting"?

• Offering something enticing to gain access to personal information

• Creating a fabricated scenario to obtain sensitive data

• Redirecting users to a malicious website

• Encrypting data to demand a ransom

What is the main goal of a man-in-the-middle (MITM) attack?

• To intercept and potentially alter the communication between two parties

• To block communication between two parties

• To create a fake website

• To host a wild party in the middle of a network

What is a common characteristic of a sophisticated phishing email?

• A personalised greeting

• A sense of urgency

• A legitimate company logo

• A professional email address

What is the primary purpose of a DMARC (Domain-based Message Authentication, Reporting & Conformance) record?

• To improve email delivery speed

• To authenticate email and prevent domain spoofing

• To encrypt email content

• To ensure all emails contain cat memes

What is the primary goal of a social engineering attack?

• To steal physical assets

• To gain access to sensitive information

• To disrupt network services

• To install malware on a device

Which of the following is a sign that a website might be spoofed?

• The URL starts with "https://"

• The website has a high-quality design

• The URL contains misspellings or extra characters

• The website uses a well-known company logo

What is the purpose of a "honeypot" in network security?

• To store certificates securely

• To encrypt network traffic for added security

• To attract bees to your server room

• To catch and analyse malicious activity

What is the role of SPF (Sender Policy Framework) records in preventing email spoofing?

• They encrypt the email body to protect content

• They block all incoming emails from a specific mail server unless manually approved

• They filter out spam emails containing Boris Johnson videos

• They specify which mail servers are authorised to send email on behalf of a domain