Social Engineering Cydex

100 points: What should you do if someone calls requesting your password?

• Provide it if they sound professional

• Hang up immediately

• Ask them to email their request

• Report the call to IT

Answer explanation

Report the call to IT – Never share credentials over the phone; report suspicious calls.

What social engineering technique involves impersonating IT support to steal credentials?

• Smishing
• Quid pro quo
• Vishing
• Pretexting

Answer explanation

C - Vishing: Using phone calls to trick victims into providing sensitive information.

What tactic involves offering fake rewards to manipulate someone into revealing data?

• Baiting
• Phishing
• Shoulder surfing
• Tailgating

Answer explanation

A - Baiting: Tempting individuals with rewards to compromise security.

Using email to request personal information is an example of what attack?

• Vishing
• Phishing
• Smishing
• Quid pro quo

Answer explanation

B - Phishing: Sending fraudulent emails to collect sensitive information.

Physically following someone into a restricted area is called what?

• Tailgating
• Pretexting
• Baiting
• Shoulder surfing

Answer explanation

A - Tailgating: Gaining physical access by following an authorized person.

Watching someone enter their password is known as what?

• Shoulder surfing
• Vishing
• Smishing
• Quid pro quo

Answer explanation

A - Shoulder surfing: Observing someone input sensitive information to steal it.

Pretending to be an authority figure to steal data is called what?

• Pretexting
• Vishing
• Baiting
• Tailgating

Answer explanation

A - Pretexting: Using a false identity to manipulate individuals.

An urgent email asking you to click a link to verify your account is an example of what?

• Smishing
• Phishing
• Vishing
• Pretexting

Answer explanation

B - Phishing: Fraudulent emails that create a sense of urgency to steal information.

Receiving an email with a suspicious attachment claiming to be an invoice is what tactic?

• Baiting
• Phishing
• Quid pro quo
• Smishing

Answer explanation

A - Baiting: Tempting recipients to download malware disguised as legitimate files.

A caller pretending to be IT support asks for your password. What is this attack called?

• Quid pro quo
• Vishing
• Pretexting
• Tailgating

Answer explanation

B - Vishing: Using phone calls to trick victims into revealing credentials.