1_Skill _Social Engineering Quiz

What is the main goal of social engineering?

• To provide cybersecurity training

• To compromise users or systems through manipulation

• To enhance network security measures

• To develop new software applications

Answer explanation

The main goal of social engineering is to compromise users or systems through manipulation, rather than providing cybersecurity training, enhancing network security measures, or developing new software applications.

What is the term used for messages sent with the intent to deceive the recipient?

• Spoofing

• Spamming

• Phishing

• Scamming

Answer explanation

The term used for emails sent with the intent to compromise the recipient is 'Phishing'.

What is the technique called when an attacker pretends to be a trusted entity over the phone?

• Vishing

• Smishing

• Pharming

• Typosquatting

Answer explanation

The correct technique when an attacker pretends to be a trusted entity over the phone is called Vishing, which stands for Voice Phishing.

Which social engineering technique involves looking over someone's shoulder to obtain sensitive information?

• Phishing

• Tailgating

• Dumpster Diving

• Shoulder Surfing

Answer explanation

Shoulder Surfing involves looking over someone's shoulder to obtain sensitive information, making it the correct social engineering technique in this scenario.

What is the most common tool used in social engineering attacks?

• Phishing

• Scamming

• Spoofing

• Smishing

Answer explanation

The most common tool used in social engineering attacks is Phishing, where attackers attempt to deceive individuals into providing sensitive information by posing as a trustworthy entity.

What is one motivation for attackers to exfiltrate sensitive data?

• To sell credentials or credit card information on the dark web

• To improve system security measures

• To enhance user experience on the network

• To promote ethical hacking practices

Answer explanation

Attackers exfiltrate sensitive data to sell credentials or credit card information on the dark web, as it can be a lucrative source of income for them.

What is consent phishing?

• Providing users with free cybersecurity tools

• Encouraging users to update their software regularly

• Tricking users into granting access to malicious apps under false pretenses

• Educating users on common phishing techniques

Answer explanation

Consent phishing involves tricking users into granting access to malicious apps under false pretenses.

Why are phishing attacks increasingly targeting mobile devices?

• Due to the growing reliance on mobile devices and their vulnerabilities

• Because mobile devices have stronger security measures than computers

• To test the effectiveness of mobile antivirus software

• To promote mobile app development

Answer explanation

Due to the growing reliance on mobile devices and their vulnerabilities

What is a common sign of a phishing email?

• Urgency in the message, including avoiding negative consequences

• Long hyperlinks with no other message

• Emails sent to multiple people with unknown recipients

• Subject line mismatched with email content

Answer explanation

Urgency in the message, including avoiding negative consequences is a common sign of a phishing email.

How can a hacker use a phishing attack to steal sensitive information?

• Sending an email pretending to be from a bank and asking for account details

• Installing antivirus software to protect against malware

• Encrypting data to prevent unauthorized access

• Creating a fake login page to trick users into entering their credentials

Answer explanation

Replicating a legitimate website to harvest user credentials is a common method used in social engineering attacks to deceive users into providing sensitive information.