Unit 6 Social Engineering Test

Social engineering is used because it has a low barrier of entry, it evades traditional security, it pays, and…

What is the primary motivation of hacktivists?

What is a person responsible for an incident that impacts or the safety or security of another entity?

Two-factor authentication can help mitigate credential harvesting attacks.

Which of the following is an example using prepending for malicious purposes?

How can organizations foster a culture of security awareness?

What is an impersonation attack?

What is the primary motivation of cybercriminals?

What is an extra layer of security that can be added to authentication?

What bias does social proof exploit?

Who are individuals or groups motivated by political or social causes, using cyber attacks to promote their agenda?

______ is meant to exploit a bias of obedience and compliance.

What is a hacktivist?

______ exploits a bias of speedy action without careful thought.

What is the first line of defense against social engineering attacks?

There is no danger in responding to a text message from an unknown number.

How would you describe the nature of a penetration test in cybersecurity?

What type of attack should an attacker use who wants to target websites that a group of end users use on a regular basis

What is a hoax?

What is the primary goal of social engineering?

What kind of threat vector involves malicious scripts being uploaded via Wi-Fi or Bluetooth?

______ exploits a bias of the desire to be exclusive.

What is the goal of a credential harvesting attack?

What does PII stand for?

Which of the following would a company want to encourage in its employees when dealing with social engineering attacks?

What is the purpose of multi-factor authentication (MFA) in defending against social engineering?

What kind of threat vector allows a malicious actor to gain direct access to your systems?

Some common threat vectors for social engineering include all EXCEPT…

What should you do if you notice an unusual request from a colleague or supervisor?

Which of the following is a type of Threat Actor?

A(n) ______ is when an opposing side tries to sway the thoughts of the other side into their favor.

Which of the following is a consequence of identity fraud?

A company should never look for its own vulnerabilities.

How would you describe a white hat hacker?

Unlike social engineering, many cyberattacks rely on low-level methods to compromise a computer, network, or system.

Who are individuals within an organization misusing their access and privileges for malicious purposes?

In the world of Cybersecurity, what is dumpster diving?

______ is meant to exploit a bias of fear.

Social __ is the concept of using relationships, persuasion, & body language to steal some personal information

What is Vishing short for?

What do nation-state actors engage in when they use cyber capabilities to advance their national interests?

Email is the primary threat vector for social engineering attacks.

Trust exploits a bias of ______.

What is another term for social proof?

What is the primary motivation of a black hat hacker?

Which of the following Threat Actor's motivation is money?

Social engineering attacks are unique from other cyberattacks in that they don’t rely on technical skills.

Why is limiting access important in defending against social engineering?

Which threat actors often use pre-written scripts or tools without a deep understanding of technology for cyber mischief

Who are government-sponsored groups or intelligence agencies engaged in cyber espionage or cyber warfare?

______ is meant to exploit a bias of common thought.

What is NOT a sign of a phishing attack?

Which of the following is NOT an example of an attempted tailgating attack?

What are influence campaigns very similar to?

Who typically conducts penetration testing in cybersecurity?

Who is vulnerable to shoulder surfing?

What distinguishes a grey hat hacker from other types of hackers?

Principle of least privilege is a when a user is given the minimum levels of permissions needed to perform their job

What is reconnaissance?

What is Phishing?

Clicking on a hijacked link could lead to ______.