Social Engineering

Which of the following is not a social engineering technique?

• Blagging

• Hacking

• Phishing

• Pharming

Which of the following would probably not help to prevent phishing?

• Train employees on security procedures

• Set up an auto-reply for e-mails received when you are on holiday

• Block e-mails from unknown senders

• Investigate content of e-mails to determine trustworthiness

Which of the following most closely matches the definition of 'Blagging'?

• Sending an e-mail to a user pretending to be someone else

• Hacking a person's computer

• Tricking a person into revealing some personal information

• Observing a legitimate user entering a password

• Setting up a fake website that looks like an official website

Which of the following would best protect against pharming?

• Use of e-mail filters

• Use of web filters

• Using biometric passwords

• Disabling USB storage devices

• Wearing 3D glasses

Which two of the following e-mail addresses would you deem trustworthy?

• @gmail.com

• @gov.uk

• @oxfam.charity.org

• @ctkcc.co.uk

Which of the following describe 'Social engineering'?

• Confusing people so they give-up information

• Manipulating people to give-up information

• Assaulting people so they give up information

• Paying people so they give-up goods and services

What type of penetration testing simulates a hacker with 'insider information'?

• White box

• Black box

• Grey box

• Big box

Which of the following people should you share your password with when they ask?

• Network managers

• Call centre workers

• Security experts

• Company managers

• Nobody

Which of the following could increase the chances of blagging being successful?

• Making the victim feel sorry for you

• Complementing the victim

• Ignoring the victim

• Claiming to be an authority figure

• Offering the victim a reward for 'helping'

What threat to cyber security could phishing take advantage of?

• Mis-configured access rights

• Weak Passwords

• Outdated software