Understanding Social Engineering

What does passive social engineering exploit?

• Use of authority figures

• Unintentional actions of others

• Email scams

• Direct interaction with users

Which method is NOT a form of active social engineering?

• Flattery

• Shoulder surfing

• Forgery

• Bribery

What does 'vishing' involve?

• Creating fake websites

• Sending emails

• Using phone calls

• Looking over someone's shoulder

What is the main purpose of phishing?

• To follow people into secure areas

• To obtain sensitive information via fraudulent websites

• To impersonate authority figures

• To listen to private conversations

Which social engineering attack involves entering a building by following someone without consent?

• Tailgating

• Phishing

• Pretexting

• Dumpster diving

What is a common feature of a phishing scam?

• Pretending to be a friend

• Offering a limited-time deal

• Using a Rock Phish kit

• Demanding immediate action

Which type of social engineering relies on the premise of friendship?

• Scarcity

• Reciprocity

• Authority

• Friendship

What does 'dumpster diving' entail?

• Searching through trash for sensitive information

• Following someone into a building

• Sending fraudulent emails

• Listening to private conversations

What should employees do to protect sensitive information on a computer?

• Use links in emails to visit websites

• Protect information from prying eyes

• Share passwords with colleagues

• Open suspicious email attachments

Which is NOT a recommended method to protect against phishing?

• Check the link destination within emails

• Verify HTTPS on e-commerce sites

• Click links in emails

• Implement phishing protections within browsers