Social Engineering Unit Review

Which of the following is a cybercrime tactic used to deceive individuals into providing sensitive information like usernames and passwords?

• Typosquatting

• Phishing

• Watering Hole Attack

• Clickjacking

A social engineering principle where the attacker pretends to be a person of importance, like a police officer, is known as:

• Scarcity

• Urgency

• Authority

• Trust

Exploiting a user's misspelling of a website, such as typing "facbook.com" instead of "facebook.com," is an example of what?

• Whaling

• Vishing

• Smishing

• Typosquatting

What type of phishing attack is directed at a high-profile target, such as a CEO?

• Spear phishing

• Whaling

• Spam

• Clone phishing

Which of the following involves an attacker stealing the cookie used to authenticate a user on a website?

• Session Hijacking

• Credential Harvesting

• Clickjacking

• Business Email Compromise

Intentionally spreading false information with the purpose of causing harm or confusion is known as:

• Misinformation

• A hoax

• Disinformation

• Impersonation

A "watering hole" attack is a metaphor for what?

• Flooding a user's inbox with spam emails.

• A place online that users frequently visit for information or resources.

• A physical location where hackers gather.

• An attack that uses a sense of urgency to trick victims.

Which principle of social engineering creates a sense that you must act now with no time to think about the outcome?

• Consensus/Social Proof

• Familiarity/Liking

• Scarcity

• Urgency

Which of the following is a key way to defend against phishing attacks?

• Re-using the same password across multiple websites.

• Immediately clicking on all links in emails to verify them.

• Enabling two-factor authentication.

• Replying to suspicious emails to ask for more information.

A type of cyberattack where an attacker gains access to a business email account to conduct fraudulent activities is called:

• Invoice Fraud

• CEO Fraud

• Business Email Compromise (BEC)

• Tailgating