Social engineering –

Which one of the following best describes social engineering?

• An automated attack on computer systems

• Cybercriminals stealing data through hacking into systems

• Websites deceiving humans into giving away personal data

• Humans using methods trick or manipulate other humans into handing over information

An attack that involves an attacker watching the victim while they provide sensitive information

• Phishing

• Blagging

• Name generator attack

• Shouldering

Which of the following is when attackers create short, fun quizzes in an attempt to find out key pieces of information that can help them answer account security questions?

• Phishing

• Blagging

• Name generator attack

• Shouldering

You receive an email from an unknown sender asking for money. The sender wants you to respond to the email. There are no hyperlinks in the email, but it includes unusual use of English and there are a number of spelling mistakes. What type of social engineering attempt is this?

• Phishing

• Spam

• Shouldering

• Blagging

What is the main goal of a phishing attack?

• To trick individuals into revealing sensitive information

• To physically steal a device

• To improve system performance

• To damage computer hardware

Which of the following is an example of blagging?

• Sending a fake email to obtain login credentials

• Watching someone type their password

• Creating a virus to infect computers

• Pretending to be a bank employee to get personal details

What should you do if you receive a suspicious message asking for your personal information?

• Reply with your details immediately

• Ignore the message and report it to the relevant authority

• Click on any links provided

• Forward it to your friends

Which of the following is a common sign of a phishing website?

• It asks for sensitive information unexpectedly

• It has a professional design and no spelling errors

• It uses a secure HTTPS connection

• It never requests any personal details

What is the primary purpose of shouldering in social engineering?

• To observe and steal sensitive information as it is entered

• To infect computers with malware

• To create fake websites for data collection

• To send mass emails to random users

Which action can help protect against social engineering attacks?

• Sharing passwords with colleagues

• Ignoring security updates

• Verifying the identity of anyone requesting sensitive information

• Clicking on all links in emails