Y11 Social engineering

Which of these is the best definition of Phishing?

• Calling someone to create an invented situation that increases the chance they will share sensitive information with you.

• Sending an email that pretends to be from a reputable company which usually has a link to click that takes you to a website that looks real but is not.

• A cyber attack that offers some a service or product that might be of benefit to the user. Once accepted, the attacker might ask for access to the user's system, or they might ask for anti-malware to be turned off.

• A cyber attack exploiting the user's curiosity or greed. The victim might be offered free music or an app upgrade.,

Which of these is the best definition of Blagging?

• Calling someone to create an invented situation that increases the chance they will share sensitive information with you.

• Sending an email that pretends to be from a reputable company which usually has a link to click that takes you to a website that looks real but is not.

• A cyber attack that offers some a service or product that might be of benefit to the user. Once accepted, the attacker might ask for access to the user's system, or they might ask for anti-malware to be turned off.

• A cyber attack exploiting the user's curiosity or greed. The victim might be offered free music or an app upgrade.,

What is the most likely to be the weakest point in a security system?

• firewall

• encryption

• backup storage

• the user

Which of these is the best definition of Baiting?

• Calling someone to create an invented situation that increases the chance they will share sensitive information with you.

• Sending an email that pretends to be from a reputable company which usually has a link to click that takes you to a website that looks real but is not.

• A cyber attack that offers some a service or product that might be of benefit to the user. Once accepted, the attacker might ask for access to the user's system, or they might ask for anti-malware to be turned off.

• A cyber attack exploiting the user's curiosity or greed. The victim might be offered free music or an app upgrade.,

Which of these is the best definition of Quid pro quo?

• Calling someone to create an invented situation that increases the chance they will share sensitive information with you.

• Sending an email that pretends to be from a reputable company which usually has a link to click that takes you to a website that looks real but is not.

• A cyber attack that offers some a service or product that might be of benefit to the user. Once accepted, the attacker might ask for access to the user's system, or they might ask for anti-malware to be turned off.

• A cyber attack exploiting the user's curiosity or greed. The victim might be offered free music or an app upgrade.,

Social engineering is ...

• the science of creating societies

• an umbrella term describing all cyberattacks

• an umbrella term describing cyberattacks committed by humans

• an umbrella term describing cyberattacks exploiting human behaviour.

Phishing can happen over

• email

• phone calls

• instant messaging

• fake websites

In a typical quid pro quo, the user is aware that they are being scammed

• True

• False

In a typical quid pro quo, the user knowingly installs software for the scammer, or they might knowingly turn off security software.

• True

• False

Your screen displays the following message: "Your hard drive is encrypted; pay 3 bitcoins to decrypt it". What kind of attack could this be?

• Ransomware (malware)

• Quid pro quo

• Virus

• Baiting