Understanding Social Engineering Threats

Which of the following is a common characteristic of phishing emails?

• They always contain a virus attachment.

• They often create a sense of urgency.

• They are always sent from known contacts.

• They never contain links.

What is the primary goal of social engineering tactics?

• To physically damage computer systems.

• To gain unauthorized access to information.

• To improve network performance.

• To create new software applications.

TypoSquatting is a technique that involves:

• Creating websites with similar names to popular sites to trick users.

• Sending mass emails to random recipients.

• Using fake identities to gain trust.

• Observing users' keystrokes to steal passwords.

A watering hole attack targets:

• Specific individuals by sending them personalized emails.

• Popular websites that a group of users frequently visits.

• Random users by sending mass spam emails.

• Company executives through business email compromise.

Which of the following is a key characteristic of spam emails?

• They are always encrypted.

• They are unsolicited and sent in bulk.

• They contain personalized information.

• They are sent from verified sources.

Impersonation in social engineering is primarily used to:

• Physically damage computer hardware.

• Trick individuals into revealing confidential information.

• Improve system performance.

• Develop new software applications.

Security awareness training is important because it:

• Teaches employees how to write code.

• Helps employees recognize and avoid security threats.

• Increases the speed of the internet connection.

• Reduces the cost of software licenses.

Vishing is a type of social engineering attack that involves:

• Sending fraudulent emails.

• Making deceptive phone calls.

• Creating fake websites.

• Observing users' screens.

Shoulder surfing is a technique used to:

• Physically observe someone entering sensitive information.

• Send phishing emails to multiple recipients.

• Create fake websites to steal information.

• Hack into secure networks remotely.

Business Email Compromise (BEC) typically involves:

• Sending mass spam emails to random users.

• Targeting specific individuals within an organization to steal funds.

• Creating fake websites to collect user data.

• Observing users' keystrokes to capture passwords.