Social Engineering Tactics and Techniques

The video tutorial discusses various social engineering attacks, including phishing, vishing, shoulder surfing, spear phishing, whaling, tailgating, piggybacking, impersonation, dumpster diving, and evil twin attacks. It emphasizes the importance of awareness and security measures to prevent these attacks, such as using privacy filters, encryption, and strict access control policies.

What is a common tactic used in social engineering to gain trust?

• Providing financial incentives

• Offering free software

• Communicating from multiple sources

• Using technical jargon

In a phishing attack, what is often imitated to deceive the victim?

• A known contact

• A popular website

• A government agency

• A news outlet

What is the term for observing someone's screen to gain information?

• Visual phishing

• Screen peeking

• Screen hacking

• Shoulder surfing

What is a recommended way to prevent shoulder surfing?

• Sitting in a crowded area

• Turning off the monitor

• Using a larger screen

• Using a privacy filter

What is spear phishing?

• An attack involving malware

• A targeted attack on specific individuals

• An attack using fake websites

• A broad attack on many users

Who is typically targeted in a whaling attack?

• Executives

• IT staff

• New employees

• Security personnel

What does the term 'tailgating' refer to in security?

• Hacking into a secure network

• Using a fake ID to enter a building

• Following someone into a restricted area

• Listening to private conversations

What is the purpose of a 'no tailgating' sign?

• To prevent unauthorized access

• To limit the number of visitors

• To ensure doors remain closed

• To monitor employee movements

What is 'dumpster diving' in the context of social engineering?

• Impersonating an employee

• Hacking into a company's database

• Using fake emails to gather data

• Searching through trash for sensitive information

What is an 'evil twin' attack?

• A cloned website for data theft

• A duplicate email account used for phishing

• A malware disguised as a software update

• A fake wireless network mimicking a legitimate one