Menu
Qualifications OCR GCSE Computer Science 1.4 Network Security

Social Engineering

Card 1 of 20 0 got it 0 still learning
Question
TapClick or press space to see the answer
Answer
All 20 cards in this set
Which term describes tricking people into giving away information or access, or into doing something that weakens security?
Social engineering
What is meant by phishing?
Sending fake messages that pretend to come from a trusted organisation
Which of these is a purpose of a phishing message?
To steal login details, money or personal data
A user enters their login details on a fake website linked from a phishing email. What is the most likely threat to the organisation?
The attacker can sign in as the user and reach that account's data
Phishing is an example of which form of attack?
Social engineering
Why can a user be described as the weak point in a network?
People can be tricked into giving away their access
Which of these is a sign that an email is a phishing message?
It threatens that the account will be closed today
A phishing email contains a link to a website that looks exactly like the real bank's site. Why does the attacker do this?
So the user types their details into the attacker's page
Why might a phishing email ask the user to open an attachment?
Opening it can install malware inside the organisation
A caller claims to work for the IT department and asks a member of staff for their password to fix an account. What is this an example of?
Social engineering
Why do attackers often send the same phishing email to thousands of people?
Only a few people need to respond for the attack to work
A user receives an email asking them to confirm their bank details by clicking a link. What should the user do?
Not click the link and contact the bank directly
A company loses customer data after a successful phishing attack. Which threat does the company now face?
Damage to the company's reputation and possible legal action
An email about a parcel says it is from a well-known courier, but the link in the message points to a different web address. What does this suggest?
It is a phishing message sent by an attacker
A phishing attack gives an attacker a user's name, address and date of birth. Which threat does this pose to the user?
The details can be used to commit fraud in their name
An email that claims to come from a bank starts with 'Dear customer' and contains several spelling mistakes. What does this suggest?
It is a typical sign of a phishing message
Which way of behaving do social engineering attackers take advantage of?
Wanting to be helpful when someone asks for help
A message claiming to come from a bank asks the user to reply with their password. Why is this a sign that the message is a phishing attempt?
A genuine bank would never ask for a password this way
A caller pretends to be an engineer and asks to be let into a company's server room. What is the purpose of this attack?
To gain access to the company's network
Why do phishing messages often warn that an account will be closed very soon?
So the user acts quickly without checking the message