Chapter Eight Practice Quiz - Info Sec

What is often referred to as the "weak link" in information security?

• Firewalls

• Antivirus software

• People

• Encryption methods

What type of attack relies on manipulating people to gain information or access to facilities?

• Phishing

• Social engineering

• Malware

• Denial of Service

Which of the following is NOT a common tactic used in social engineering attacks?

• Sending sensitive information via unprotected channels

• Handing over passwords

• Posting important data in conspicuous places

• Using strong encryption methods

What is a social engineering attack where an attacker calls in a panicked voice and asks for sensitive information?

• Phishing

• Pretexting

• Baiting

• Tailgating

What are the two primary sources of information to look at when protecting people and commercial organizations?

• Human intelligence and open source intelligence

• Firewalls and antivirus software

• Encryption methods and secure passwords

• Physical security and network security

What is Human Intelligence (HUMINT)?

• Data gathered from electronic devices

• Data gathered by talking to people

• Data gathered from social media

• Data gathered from job postings

Which of the following is NOT a method to collect HUMINT?

• Observing people's schedules

• Using torture

• Tricking participants with scams

• Analyzing job postings

What is Open Source Intelligence (OSINT)?

• Information collected from publicly available sources

• Information collected from private conversations

• Information collected from encrypted databases

• Information collected from physical surveillance

Which of the following is a primary source of information for social engineering attacks?

• Encrypted emails

• Job postings

• Private conversations

• Physical surveillance

What can attackers use to set up social engineering attacks based on a target's skills or interests?

• Résumés

• Encrypted emails

• Private conversations

• Physical surveillance