02 Social Engineering

What is social engineering?

• A technique used to manipulate computer systems

• A manipulation technique used to deceive and manipulate others

• A form of phishing attack

• A method of physical surveillance

How can individuals and organizations protect against social engineering?

• By implementing strict policies and procedures

• By using email filters and awareness campaigns

• By securing physical access to information

• All of the above

What is blagging (pretexting) in social engineering?

• Impersonating a trusted authority figure

• Using deceptive emails to trick individuals

• Physically observing someone entering confidential information

• None of the above

How can individuals protect against phishing?

• By verifying the sender's identity

• By clicking on suspicious links

• By sharing sensitive information in response to email requests

• By ignoring unsolicited emails

What is shouldering (or shoulder surfing) in social engineering?

• Impersonating a trusted authority figure

• Using deceptive emails to trick individuals

• Physically observing someone entering confidential information

• None of the above

How can individuals protect against shouldering?

• By maintaining physical privacy while entering sensitive information

• By being aware of one's surroundings

• By using privacy screens or shields

• All of the above

What is the main focus of social engineering?

• Manipulating computer systems

• Exploiting psychological vulnerabilities

• Using technical means

• Performing actions without consent

What is the importance of awareness and education in protecting against social engineering?

• It helps in recognizing signs of manipulation and deception

• It reduces the risk of falling for phishing attacks

• It secures physical access to information

• It verifies the identity of anyone requesting sensitive information

What is the purpose of verification in protecting against social engineering?

• To confirm the identity of anyone requesting sensitive information

• To establish clear guidelines for handling requests for sensitive data

• To reduce the risk of falling for phishing attacks

• To secure physical access to information

What is the role of policy and procedures in protecting against social engineering?

• To confirm the identity of anyone requesting sensitive information

• To establish clear guidelines for handling requests for sensitive data

• To reduce the risk of falling for phishing attacks

• To secure physical access to information