stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Ethical Hacking 5 Social Engineering Flashcards | StudBud
Explore
/
Ethical Hacking 5 Social Engineering
Ethical Hacking 5 Social Engineering
42 terms
·
StudBud Administration
·
104 plays
Imported from external platform
Flashcards
42 cards
F
Practice quiz
P
Host live
L
Questions
42
Answers
1
What is a tool that can download webpages for later inspection so you don’t have to visit the actual site?
8TTrack
ATTrack
HTTrack
THTrack
2
What is not a way to prevent an SE Attack?
avoid tempting offers
have multifaceted authentication
verfiy suspicious sources
run all emails through a spam filter
3
Burners are used to perform what type of attacks?
Baiting
Swishing
Spear Phishing
Vishing
4
What is the best approach when creating a fake login-style webpage?
clone an onion template and customize it manually
clone a third party template and customize it manually
clone a public template and customize it manually
clone a private template and customize it manually
5
What are ways that social engineering attacks can be used to obtain information about a target? (2 answers)
harsh interrogation
public flogging
convincing lies
simple questions
6
What are ways that phishing attacks can be used to trick users into entering the fake site? (2 answers)
spoofed emails
non-malicious links in social media forums
SMS messages
ESP
7
SE is not based on programming flaws or operating system errors, but rather on the human factor.
False
True
8
What is not one of the 3 social engineering purposes?
Information Gathering
Fraud
Enumeration
System Access
9
What is true about Ngrok features? (3 answers)
You can set auth credentials to protect your tunnel
Can listen to requests but not responses over the tunnel
Several tunnels can run simultaneously for a single Ngrok client
Creates an HTTPS URL on your local machine
10
What is true about Phishing? (3 answers)
usually target a large-scale audience
successful attack is measured according to the % of those who fell for it
term was coined by combining the words password fishing
when a target is frightened by alarms and threats on a device
11
To create a malicious SFX, a payload and a legitimate document are required.
False
True
12
What is a phishing tool that creates a fake website to obtain user information?
BionicEye
WanderingEye
HiddenEye
GoldenEye
13
The use of burners and ID spoofing would constitute what SE attack method?
Physical
Computer-Based
Sociological
Phone-Based
14
What is true about HiddenEye? (3 answers)
injects a keylogger into the clone
copies a login-style webpage
can also operate on IOS mobile phone platforms
collects information about the browser, user, and more
15
What is not one of the 4 steps in the SE process?
Winning Information
Connect to Deceive
Watergate everything
Cover your Tracks
16
SEToolkit can be used for email spoofing in both mass mailing and vishing campaigns.
False
True
17
What is a type of attack using a USB that is set up to pose as a keyboard or human interface device (HID)?
BadUSB
MeanUSB
ConUSB
WickedUSB
18
A platform meant to resemble Facebook is what?
faceB00k
faceьook
Faicebook
Facebrok
19
Burner numbers are temporary numbers that can be disposed of after use.
True
False
20
Mirroring tools require what, for sure? (2 answers)
a certificate for (false) proof of authenticity
database
personal server
unique syntax
21
HiddenEye uses what, to set up phishing sites?
Ragnarok
Ngrok
Zotrok
Mgrok
22
What is a technique used to investigate sites by creating a copy of them?
Sensor ring
Site monitoring
Site mirroring
Mirror reflection
23
The computer that hosts a fake webpage will log incoming POST requests.
True
False
24
In SFX because an actual .docx file is open, the user should not suspect that an .exe is running.
False
True
25
Social engineering attacks are considered hacking with computers.
False
True
26
What is a CLI-based tool that can send email via SMTP servers?
Switchmail
Seekmail
Sendmail
Sentmail
27
SE attacks performed at popular physical locations that are considered safe are called what?
Water Wheel
Whataburger
Water Cooler
Watering Hole
28
What is not considered a SE attack method?
Physiological
Physical
Computer-Based
Phone-Based
29
What attack method is mainly used to gather intelligence or pre-attack information for use via voice-based applications?
Vishing
Hooking
Spear Phishing
Phishing
30
A sub-genre of phishing attacks where a smaller group is targeted using more personalized baits is called what?
Spear Phishing
Vishing
Swishing
Fly Phishing
31
Which provider offer services that can be used to hide personal audio-related information? (2 answers)
KakaDo
Ipchicken
YaMon
SpoofCard
32
Lock picking and GPS tracking are also considered social engineering attacks.
False
True
33
What is the most common type of social engineering attack?
Fraud
Physical
Information Gathering
System Access
34
What is a social engineering method that can be used to trick the victim into misreading the document extension?
Left-to-Left Override
Right-to-Left Override
Left-to-Right Override
Right-to-Right Override
35
What is not considered obfuscating a URL?
shortened URLs
use domains with names and lettering that imitates well-known sites
URLs containing 2 special characters
use web redirection vulnerabilities and URL encoding
36
What attack is where a person is prompted to install software to clear abnormalities?
Spear Phishing
Vishing
Watering Cooler
Scareware
37
Telecommunication-related hacking is called what?
phaking
faking
freaking
phreaking
38
Creating fake executable documents is possible using what?
SMF
SDF
SFO
SFX
39
How do you manipulate the file name in SFX?
TRL- Override
LRT- Override
RTL- Override
LTR- Override
40
What is not an option in the main SEToolkit window?
Update Metasploit
Track Penetration Testing
Third-Party Modules
Update ETS
41
What attack method is when a CD or USB drive with malware is left in a place where victims can find it?
Bazinga
Baiting
Dropsie
Beaching
42
The HiddenEye tool operates in OS.
True
False
