Social Engineering Quiz

What is the primary goal of social engineering attacks?

• To exploit technological vulnerabilities

• To manipulate people into divulging sensitive information

• To create complex computer viruses

• To intercept wireless communications

Which of the following is NOT a common type of social engineering attack mentioned in the article?

• Phishing

• Baiting

• Ransomware

• Pretexting

In a tailgating attack, what does the attacker typically do?

• Sends a series of threatening emails

• Follows an authorized person into a restricted area

• Creates a fake social media profile

• Installs malware on the target's computer

What is the main characteristic of a watering hole attack?

• It targets a specific group through a trusted website

• It involves leaving infected USB drives in public places

• It uses phone calls to impersonate authority figures

• It sends mass emails with malicious attachments

Which social engineering technique involves creating a sense of urgency or fear to prompt action?

• Baiting

• Quid pro quo

• Scareware

• Tailgating

What is the primary defense against most social engineering attacks?

• Installing antivirus software

• Using strong firewalls

• Employee education and awareness

• Implementing biometric security measures

In a quid pro quo attack, what does the attacker typically offer?

• A free gift in exchange for information

• Technical support in exchange for login credentials

• Money in exchange for company secrets

• A job opportunity in exchange for personal data

Which of the following is a characteristic of a spear phishing attack?

• It targets a large number of random individuals

• It's highly personalized to the victim

• It always involves physical intrusion

• It only affects corporate networks

What is the main purpose of pretexting in social engineering?

• To create a fabricated scenario to obtain information

• To physically enter secure premises

• To distribute malware-infected devices

• To overwhelm security systems with data requests

How does a baiting attack typically differ from phishing?

• Baiting uses only digital methods

• Baiting always involves financial transactions

• Baiting often uses physical media like USB drives

• Baiting targets only high-level executives