Menu

Social Engineering

Card 1 of 14 0 got it 0 still learning
Question
TapClick or press space to see the answer
Answer
Social Engineering exam questions18 questions with mark schemes and example answers
All 14 cards in this set
What is meant by social engineering?
Obtaining confidential information by asking people for it
What does shoulder surfing mean?
Watching someone as they type in their password
A hacker uses a CCTV camera to record staff as they type their passwords into a computer. Which technique is this?
Shoulder surfing
Which of these describes phishing?
Sending fake messages that ask users for their personal details
A student receives a text that claims to be from their bank and asks them to confirm their password. Which type of attack is this?
Phishing, a fake message asks for personal information
Why can social engineering still succeed against a company that keeps its antivirus software up to date?
It targets the people who use the system rather than the software
Which of the following is a social engineering attack?
Phoning an employee and pretending to be from the IT team
How does shoulder surfing differ from phishing?
Shoulder surfing watches the user in person, phishing sends them a fake message
Which term describes the act of obtaining confidential information by asking people for it?
Social engineering
What is the name for the technique of obtaining information or passwords by observing someone as they type them in?
Shoulder surfing
Which term describes sending emails, texts or phone calls pretending to be from a bank or website in order to get personal information?
Phishing
Phishing messages are often made to look as though they were sent by a well-known bank. Why?
So that the person believes the message is genuine
A worker is phoned by someone who claims to be from their bank and asks for their account details. Which type of attack is this?
Phishing
A phishing email tells a user that their account will be closed unless they confirm their details. What is the sender trying to obtain?
Usernames, passwords and credit card details