Cyber EOP - Social Engineering Attacks By Mr. B

What is the most common type of social engineering attack?

• Tailgating

• Phishing

• Whaling

• Baiting

Answer explanation

Phishing is the most common social engineering attack, where attackers deceive individuals into providing sensitive information, often through fake emails or websites. It targets a wide audience, making it prevalent.

Which type of phishing specifically targets high-level executives?

• Spear phishing

• Whaling

• SMS phishing

• Angler phishing

Answer explanation

Whaling is a type of phishing that specifically targets high-level executives, making it distinct from other forms like spear phishing, which targets individuals, or SMS and angler phishing, which use different methods.

What is a common tactic used in baiting attacks?

• Spoofing email addresses

• Creating a false sense of urgency

• Following someone into a secure area

• Offering free gifts

Answer explanation

Offering free gifts is a common tactic in baiting attacks, as it entices individuals to engage without suspicion, making them more likely to fall for the scam.

In a honey trap attack, what does the attacker pretend to be?

• A delivery driver

• An IRS auditor

• A customer service representative

• A romantic interest

Answer explanation

In a honey trap attack, the attacker pretends to be a romantic interest to manipulate the target emotionally and gain sensitive information. This tactic exploits personal relationships for malicious purposes.

What is the goal of pretexting in social engineering?

• To impersonate a delivery driver

• To install malware

• To create a fake scenario to gain information

• To steal physical items

Answer explanation

The goal of pretexting in social engineering is to create a fake scenario to gain information. This technique involves fabricating a story or identity to manipulate the target into revealing sensitive data.

What does SMS phishing often spoof?

• Multi-factor authentication requests

• Email addresses

• Delivery notifications

• Social media accounts

Answer explanation

SMS phishing often targets multi-factor authentication requests, tricking users into providing sensitive information by pretending to be legitimate verification messages from trusted services.

What is scareware designed to do?

• Redirect to phishing sites

• Steal login credentials

• Create pop-up alerts about fake viruses

• Install real viruses

Answer explanation

Scareware is designed to create pop-up alerts about fake viruses, tricking users into believing their system is infected. This tactic aims to scare users into purchasing unnecessary software or services.

What is tailgating in the context of social engineering?

• Following someone into a secure area

• Offering free gifts

• Sending fake emails

• Creating a false sense of urgency

Answer explanation

Tailgating in social engineering refers to the act of following someone into a secure area without proper authorization. This tactic exploits trust and allows unauthorized access, making it the correct choice.

In a watering hole attack, what does the hacker infect?

• A delivery truck

• A legitimate website

• An email server

• A social media account

Answer explanation

In a watering hole attack, hackers target a legitimate website frequented by their victims. By infecting this site, they can compromise users who visit it, making 'a legitimate website' the correct answer.

What is a key method to prevent social engineering attacks?

• Ignoring unsolicited emails

• Training staff to recognize tactics

• Using only verbal communication

• Avoiding technology altogether

Answer explanation

Training staff to recognize tactics is crucial in preventing social engineering attacks, as it equips them with the knowledge to identify and respond to potential threats effectively.