WorksheetsCengage 2
Total questions: 20
Worksheet time: 10mins
What is the attack surface of social engineering?
Manipulation
Human vectors
Persuasion
Deception
Bjorn just received a phone call in which the person claimed to be a senior vice president demanding that his password be reset, or else Bjorn’s supervisor would be contacted about his lack of cooperation. Bjorn was convinced that this was a social engineering attack. Which principle of human manipulation did the attacker attempt on Bjorn?
Authority
Fright
Intimidation
Urgency
Which of the following is NOT a personal technique used by social engineering attackers to gain the trust of the victim?
Provide a reason.
Project confidence.
Demand compliance.
Use evasion and diversion.
Albrecht received a call from a senior vice president of finance who had received a phishing email and had deleted it. What type of phishing attack was this?
Dolphining
Harpooning
Phishing spear
Whaling
Tobias received an SMS text message that falsely said his bank account was overdrawn and, to avoid a $45 fee, he should contact the bank immediately with an explanation. What type of social engineering attack is this?
Texting attack
SMS phishing
Smishing
IM vectoring
Which of the following is NOT true about BEC?
It is decreasing in popularity among threat actors.
It takes advantage of electronically making payments or transferring funds.
It takes advantage of the size and complexity of large enterprises.
It is not limited to businesses.
Which social engineering attack is masquerading as a real or fictitious character and then playing out the role of that person on a target?
Pretending
Pretexting
Impersonation
Acting
Wolfgang-Cashman is a new intern at the online company WebHighSchoolStore.com. He has been assigned the task of researching all the similar domain names to theirs in order to counteract attacks. What is Wolfgang-Cashman combating?
Mistranslations
Spimming
Typo squatting
Redactioning
What is false or inaccurate information that comes from a malicious intent?
Misinformation
Half-truths
Disinformation
Varication
Which of the following is NOT a type of data reconnaissance?
Purchasing used technology equipment
Excel dorking
Dumpster diving
Shoulder surfing
Which type of sensor is most appropriate for monitoring a large warehouse for intruders?
Microwave sensor
IR sensor
XG sensor
Passive RGP sensor
Which of the following statements is NOT true about a pressure sensor?
A pressure sensor can differentiate between a car and a person.
Modern pressure sensors can differentiate between what has entered and where they are headed.
A pressure sensor is a type of management control.
A pressure sensor can be used to detect if a person has entered a restricted area.
Arndt is on a team that is increasing the security in an office. They want to allow anyone to pass by a door but have an alarm sound whenever someone gets too close to the door. Which sensor would Arndt recommend using?
IR sensor
Microwave sensor
Ultrasonic sensor
Pressure sensor
Which type of buffer is automated and has two interlocking doors, only one of which can be opened at a time?
Access control vestibule
Reception area
Waiting room
Vestibule office
Milan is on a design team that needs to run a hardened carrier PDS underground between two buildings. What requirement would Milan add to the specifications?
It must be buried at least 25 feet below surface level.
It can only be used for fiber-optic cables.
It must be visually inspected on a weekly basis.
It must be encased in concrete.
Which data classification has the highest level of data sensitivity?
Eyes-only
Sensitive
Private
Confidential
Jan is working on classifying data. Some data has been identified that if compromised, the function and mission of the enterprise would be severely impacted. Which data classification should Jan give this data?
Secret
Top secret
Critical
Classified
Which type of data is hospital patient information protected by HIPAA?
Restricted data
Regulated data
Secure data
Private data
JSON and XML would be classified as which type of data?
Compiled data
Lightweight data
Schematic data
Non-human-readable data
Which of the following data security methods creates a copy of the original data but uses obfuscation on any sensitive elements?
Data masking
Data protecting
Data tokening
Data covering
