A social engineering technique whereby attackers under disguise of a legitimate request
attempt to gain access to confidential information is commonly referred to as:
Phishing
Privilege escalation
Backdoor access
Shoulder surfing - ANSWER Phishing
Which of the following answers refer to smishing? (Select 2 answers)
Social engineering technique
E-mail communication
Spam over Internet Telephony (SPIT)
Text messaging
Spam over Internet Messaging (SPIM) - ANSWER Social engineering technique
Text messaging
The practice of using a telephone system to manipulate user into disclosing confidential
information is known as:
Whaling
Spear phishing
Vishing
Pharming - ANSWER Vishing
1
,Which of the following terms is commonly used to describe an unsolicited advertising
message?
Spyware
Adware
Malware
Spam - ANSWER Spam
What type of spam relies on text-based communication?
Vishing
SPIM
Bluesnarfing
SPIT - ANSWER SPIM
Phishing scams targeting a specific group of people are referred to as:
Vishing
Spear phishing
Spoofing
Whaling - ANSWER Spear phishing
In computer security, the term "Dumpster diving" is used to describe a practice of sifting
through trash for discarded documents containing sensitive data. Found documents
containing names and surnames of the employees along with the information about
positions held in the company and other data can be used to facilitate social engineering
attacks. Having the documents shredded or incinerated before disposal makes dumpster
diving less effective and mitigates the risk of social engineering attacks.
True
False - ANSWER True
2
,A situation in which an unauthorized person can view another user's display or keyboard to
learn their password or other confidential information is referred to as:
Spear phishing
Tailgating
Shoulder surfing
Spoofing - ANSWER Shoulder surfing
Which of the following answers refer to the characteristic features of pharming? (Select 3
answers)
Domain hijacking
Traffic redirection
Fraudulent website
Password attack
Credential harvesting - ANSWER Traffic redirection
Fraudulent website
Credential harvesting
What is tailgating?
Acquiring unauthorized access to confidential data
Looking over someone's shoulder to get information
Gaining unauthorized access to restricted areas by following another person
Manipulating a user into disclosing confidential information - ANSWER Gaining
unauthorized access to restricted areas by following another person
3
, In social engineering, the term "Elicitation" describes the use of casual conversation to
extract non-public information from people without giving them the feeling they are being
interrogated.
True
False - ANSWER True
Phishing scams targeting people holding high positions in an organization or business are
known as:
Vishing
Smishing
Whaling
Pharming - ANSWER Whaling
Which of the following is used in data URL phishing?
Prepending
Typosquatting
Pretexting
Domain hijacking - ANSWER Prepending
An email message containing a warning related to a non-existent computer security threat,
asking a user to delete system files falsely identified as malware, and/or prompting them to
share the message with others would be an example of:
Vishing
Impersonation
Virus hoax
Phishing - ANSWER Virus hoax
4
attempt to gain access to confidential information is commonly referred to as:
Phishing
Privilege escalation
Backdoor access
Shoulder surfing - ANSWER Phishing
Which of the following answers refer to smishing? (Select 2 answers)
Social engineering technique
E-mail communication
Spam over Internet Telephony (SPIT)
Text messaging
Spam over Internet Messaging (SPIM) - ANSWER Social engineering technique
Text messaging
The practice of using a telephone system to manipulate user into disclosing confidential
information is known as:
Whaling
Spear phishing
Vishing
Pharming - ANSWER Vishing
1
,Which of the following terms is commonly used to describe an unsolicited advertising
message?
Spyware
Adware
Malware
Spam - ANSWER Spam
What type of spam relies on text-based communication?
Vishing
SPIM
Bluesnarfing
SPIT - ANSWER SPIM
Phishing scams targeting a specific group of people are referred to as:
Vishing
Spear phishing
Spoofing
Whaling - ANSWER Spear phishing
In computer security, the term "Dumpster diving" is used to describe a practice of sifting
through trash for discarded documents containing sensitive data. Found documents
containing names and surnames of the employees along with the information about
positions held in the company and other data can be used to facilitate social engineering
attacks. Having the documents shredded or incinerated before disposal makes dumpster
diving less effective and mitigates the risk of social engineering attacks.
True
False - ANSWER True
2
,A situation in which an unauthorized person can view another user's display or keyboard to
learn their password or other confidential information is referred to as:
Spear phishing
Tailgating
Shoulder surfing
Spoofing - ANSWER Shoulder surfing
Which of the following answers refer to the characteristic features of pharming? (Select 3
answers)
Domain hijacking
Traffic redirection
Fraudulent website
Password attack
Credential harvesting - ANSWER Traffic redirection
Fraudulent website
Credential harvesting
What is tailgating?
Acquiring unauthorized access to confidential data
Looking over someone's shoulder to get information
Gaining unauthorized access to restricted areas by following another person
Manipulating a user into disclosing confidential information - ANSWER Gaining
unauthorized access to restricted areas by following another person
3
, In social engineering, the term "Elicitation" describes the use of casual conversation to
extract non-public information from people without giving them the feeling they are being
interrogated.
True
False - ANSWER True
Phishing scams targeting people holding high positions in an organization or business are
known as:
Vishing
Smishing
Whaling
Pharming - ANSWER Whaling
Which of the following is used in data URL phishing?
Prepending
Typosquatting
Pretexting
Domain hijacking - ANSWER Prepending
An email message containing a warning related to a non-existent computer security threat,
asking a user to delete system files falsely identified as malware, and/or prompting them to
share the message with others would be an example of:
Vishing
Impersonation
Virus hoax
Phishing - ANSWER Virus hoax
4
