some one call pretend to be from external auditor asking you to demonstrate to restore web server from crash

Authority support social engineering

What should you do if you suspect you are experiencing a social engineering attack?

End contact with the person and report the suspected attack.

Why do cyber attackers commonly use social engineering attacks?

Attackers gain what they want while bypassing most technical security ctrl

What is the most effective way to detect and stop social engineering attacks?

Organization-wide training for recognizing common attacks

Social engineering attacks rely on which of the following?

Convincing people to perform a harmful action

You receive an urgent email from your colleague warning you of a critical software update to be installed immediately...

Call your colleague on the phone to confirm that they sent you this message

studbud

ECSS-V9-05-Social Engineering

10 termsStudBud Administration75 plays

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
Refers to person-to-person interaction to retrieve the desired information
Mobile-based Social Engineering
Human-based Social Engineering
Computer-based Social Engineering
Cloud-based Social Engineering
2
some one call pretend to be from external auditor asking you to demonstrate to restore web server from crash
Technical support social engineering
Dumpster diving
War dialing
Authority support social engineering
3
What should you do if you suspect you are experiencing a social engineering attack?
Ask the person questions until you are sure of their intentions
Get and install the latest antivirus and firewall
Request assistance to make sure your computer is up-to-date
End contact with the person and report the suspected attack.
4
Why do cyber attackers commonly use social engineering attacks?
Attackers can easily find unpatched systems to exploit
Attacks can go undetected for a long time since they don't require user int
Social engineering can only be done by high technical skill hackers
Attackers gain what they want while bypassing most technical security ctrl
5
An illegitimate email falsely claiming to be from a legitimate site attempts to acquire user's personal or account info.
Spam
Phishing
Mail Bombing
Worm
6
What is the most effective way to detect and stop social engineering attacks?
Continuous monitoring for SQL injection attacks
Up-to-date and current anti-virus software
Do not allow Employee to use Social Networking media such as facebook
Organization-wide training for recognizing common attacks
7
Social engineering attacks rely on which of the following?
Scanning computers that never update software/operating system
Convincing people to perform a harmful action
Developing exploits for unpatched vulnerabilities
Infecting trusted applications with a buffer overflow
8
You receive an urgent email from your colleague warning you of a critical software update to be installed immediately...
Ignore and delete the email
Reply to your colleague's email to confirm that they sent the email
Call your colleague on the phone to confirm that they sent you this message
Click the link to make sure it leads to the application's real website
9
X pretends chatting on the phone, authorized staff came, X grabs the door & go in.what type of social engineering is it?
Piggy backing
Shoulder surfing
Tailgating
Eavesdropping
10
An authorized person provides access to an unauthorized person by keeping the secure door open
Tailgating
Piggybacking
Reverse Social Engineering
Eavesdropping

ECSS-V9-05-Social Engineering Flashcards | StudBud

ECSS-V9-05-Social Engineering

10 termsStudBud Administration75 plays

ECSS-V9-05-Social Engineering

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
Refers to person-to-person interaction to retrieve the desired information
Mobile-based Social Engineering
Human-based Social Engineering
Computer-based Social Engineering
Cloud-based Social Engineering
2
some one call pretend to be from external auditor asking you to demonstrate to restore web server from crash
Technical support social engineering
Dumpster diving
War dialing
Authority support social engineering
3
What should you do if you suspect you are experiencing a social engineering attack?
Ask the person questions until you are sure of their intentions
Get and install the latest antivirus and firewall
Request assistance to make sure your computer is up-to-date
End contact with the person and report the suspected attack.
4
Why do cyber attackers commonly use social engineering attacks?
Attackers can easily find unpatched systems to exploit
Attacks can go undetected for a long time since they don't require user int
Social engineering can only be done by high technical skill hackers
Attackers gain what they want while bypassing most technical security ctrl
5
An illegitimate email falsely claiming to be from a legitimate site attempts to acquire user's personal or account info.
Spam
Phishing
Mail Bombing
Worm
6
What is the most effective way to detect and stop social engineering attacks?
Continuous monitoring for SQL injection attacks
Up-to-date and current anti-virus software
Do not allow Employee to use Social Networking media such as facebook
Organization-wide training for recognizing common attacks
7
Social engineering attacks rely on which of the following?
Scanning computers that never update software/operating system
Convincing people to perform a harmful action
Developing exploits for unpatched vulnerabilities
Infecting trusted applications with a buffer overflow
8
You receive an urgent email from your colleague warning you of a critical software update to be installed immediately...
Ignore and delete the email
Reply to your colleague's email to confirm that they sent the email
Call your colleague on the phone to confirm that they sent you this message
Click the link to make sure it leads to the application's real website
9
X pretends chatting on the phone, authorized staff came, X grabs the door & go in.what type of social engineering is it?
Piggy backing
Shoulder surfing
Tailgating
Eavesdropping
10
An authorized person provides access to an unauthorized person by keeping the secure door open
Tailgating
Piggybacking
Reverse Social Engineering
Eavesdropping