ALISON Social Engineering & Human Factor Security 2

Question 1

What is 'baiting' as a social engineering technique?

Accepted Answer

Leaving infected USB drives or media in public places for victims to find

Answer

Baiting lures victims by leaving malware-laden physical media (like USB drives) where curious individuals will pick them up and insert them into computers.

Question 2

Which term describes a highly targeted phishing attack aimed at a specific individual or organization?

Accepted Answer

Spear phishing

Answer

Spear phishing targets specific individuals using personalized information to make the attack more convincing than generic phishing campaigns.

Question 3

What is 'whaling' in the context of social engineering?

Accepted Answer

Spear phishing attacks targeting senior executives or high-profile individuals

Answer

Whaling targets 'big fish' such as CEOs, CFOs, and other executives, leveraging their authority and access to high-value systems.

Question 4

What countermeasure best protects against phishing attacks in an organization?

Accepted Answer

Implementing multi-factor authentication and employee phishing simulations

Answer

Combining MFA (to limit damage if credentials are stolen) with simulated phishing training significantly reduces organizational phishing risk.

Question 5

What does 'quid pro quo' mean as a social engineering tactic?

Accepted Answer

Offering a service or benefit in exchange for information or access

Answer

In quid pro quo attacks, the attacker offers something valuable (like IT help) in exchange for the victim providing credentials or access.

ALISON - Advance Learning Interactive Systems Online Practice Test

ALISON - Advance Learning Interactive Systems Online Practice Test

ALISON Social Engineering & Human Factor Security 2