WorksheetsSocial Engineering
Total questions: 8
Worksheet time: 9mins
What is phishing?
Attack that uses human interactions (social skills) to obtain info about an organization and computer systmes
Attack that floods a network and servers with traffic to overload resources and bandwidth
Attack where a hacker inserts malicious code into a website to force it to return protected info
Attack that uses emails to ask form personal info by posing as a trustworthy organization
Select all options that indicate an email is fake
The email has attachments on it that ask you to download
The email comes from a school email address that matches what the directory lists when you look it up separately
The email has poor grammar and many misspellings
The email has a receipt of payment that asks you for more of your credentials
What is spear phishing
attacks that are carried out over the phone
attacks that are targeted at a specific company or individual
attacks that occur over text messaging
attacks that capture user info through a fake login page
True or False: Cybersecurity is a balance between security and convenience
True
False
Which is NOT an example of social engineering?
An individual is carrying heavy boxes and cannot get their keys out or open the door to an office. They notice you passing by and ask you if you can help them and let them into the room.
An individual runs a program called Jack the Ripper to try and find out the password to your UAH single sign on account.
An individual calls you on the phone and requests information about an employee record. They tell you that they are part of the IT department and need this information to determine whether to close the account or not.
You meet a new employee at the beginning of the semester while you're at the cafeteria. You have a good conversation with this person and find out that you both have dogs. A few days later you encounter the same person again, and they begin to ask you about the Dean, if she owns any pets, as well.
Shouldering surfing...
...means looking over someone's shoulder to see personal information
...means framing as someone else to gain personal information
...means using pop-up adverts to redirect users
...means using threats to gain personal information
Which of these are examples of phishing?
Did you know what social engineering was before this training?
