Social Engineering & Access Control Quiz

How can users defend against watering hole attacks?

• By installing anti-virus and anti-malware programs.

• By avoiding common websites frequented by many users.

• By relying on browser extensions to detect malicious URLs.

Which of the following best describes phishing?

• Fishing for compliments on social media

• Attempting to gain sensitive information through electronic communication by posing as a trustworthy source

• Using real fishing as a metaphor for online security

• Sending out random emails without a specific target

What is a common characteristic of obvious phishing attempts?

• Proper grammar and spelling

• Well-designed graphics and fonts

• Misspelled words and odd graphics

• Promises that seem too good to be true

What is another term for phishing done by phone call or voice message?

• Voice Broadcasting

• Voice Messaging

• Vishing

• Audio Phishing

What is whaling in the context of phishing?

• Phishing attempt directed at high-profile targets like CEOs

• Phishing attempt directed at low-profile individuals

• Phishing attempt using cloned email addresses

• Phishing attempt through voice messages

What is social engineering?

• A form of psychological manipulation to gain access to sensitive information or perform unauthorized actions

• A technique used by hackers to exploit software vulnerabilities

• A physical intrusion into a secure facility

• A marketing strategy to promote products on social media

How can individuals defend against social engineering attacks?

• By complying with all requests received via email

• By ignoring any communication from unknown sources

• By sharing personal information freely

• By using the same password for all accounts

SPAM emails can be identified by:

• Their personalized content

• Their encrypted attachments

• Their generic and unsolicited nature

• Their secure links

Which group of threat actors is fueled by money and the desire to gain power to continue their influence?

• Hacktivists

• Shadow IT

• Nation States and APT

• Competition

What do Insider Threats primarily exploit to cause damage within an organization?

• Exploits and attacks for a cause

• Advanced government or military organizations

• Shadow IT infrastructure

• Weak points known within the organization