stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
SE-Part2 Flashcards | StudBud
Explore
/
SE-Part2
SE-Part2
13 terms
·
StudBud Administration
·
40 plays
Imported from external platform
Flashcards
13 cards
F
Practice quiz
P
Host live
L
Questions
13
Answers
1
Which Android Trojan imitates a fraudulent application and has been discovered to spoof a Vietnamese government portal?
Keylogger
ScreenReader
SparkCat
GoldDigger
2
What is the purpose of repackaging legitimate apps?
To enhance user experience
To update app features
To improve app performance
To inject malware or spyware
3
Which of the following best describes the process of repackaging legitimate apps to include malicious code?
Create a new app that mimics a legitimate app with hidden malicious code
Repackaging involves injecting malicious code into a legitimate app
Updating an existing app with new security features to protect user data.
Download legitimate apps, add features, & redistribute without ill intent.
4
Which technique involves capturing all information displayed on the mobile screen and relaying it back to hackers?
Overlays
Screen mirroring
Screen reading
Keylogging
5
Attacker created Pinterest accounts impersonating a company. What technique most effective to detect this attack?
Training employees to only trust socmed accounts that have been authorized.
Deploying honeypot accounts that attract impersonators
Implementing a public key infrastructure system for verification.
Regular brand monitoring across social platforms that scan logo usage.
6
What is a common method attackers use to perform social engineering attacks using malicious mobile apps?
Publishing malicious apps on major application stores
Sending phishing emails
Hacking into Wi-Fi networks
Creating fake social media profiles
7
Which countermeasure is most effective in preventing identity theft and ensuring the security of personal information?
Implementing periodic password changes and avoiding guessable passwords.
Using physical security measures like ID cards and restricted access
Conducting regular social engineering campaigns and gap analysis
Employing advanced phishing detection tools and creating phishing campaigns
8
Which countermeasure involves monitoring user permissions, access controls, and user actions to deter insider threats?
Data Loss Prevention
Log Management
Anti-phishing toolbar
IDS/IPS
9
Which phishing detection indicator involves suspicious URLs and misspelled domains?
Use of public email addresses
Request to verify personal information
Poorly written messages
Subdomains and typosquatting
10
Which technique involves capturing text-based content, appears on the mobile screen by abusing accessibility services?
Exploiting inherent trust users place in social connections
Screen reading
Overlays
Exploiting inherent trust users place in social connections
11
What is the primary motive of mobile-based social engineering?
To install malware in the target's device
To send spam messages
To create fake social media profiles
To steal physical devices
12
What are the primary objectives of social engineering defense strategies in an organization?
Enhance physical security measures and restrict access.
Improve technological infrastructure with cybersecurity tools.
Create user awareness, implement robust controls, and establish policies
Streamlining processes and automating security protocols.
13
What is a significant threat posed by impersonation attacks on social networking sites?
Improved social media engagement
Enhanced user privacy
Increased app downloads
Data breaches and identity theft
