ALISON Social Engineering & Human Factor Security

Question 1

Which social engineering attack involves sending fraudulent emails that appear to come from a trusted source to steal credentials?

Accepted Answer

Phishing

Answer

Phishing uses deceptive emails that mimic legitimate organizations to trick recipients into revealing sensitive information.

Question 2

What is 'pretexting' in the context of social engineering?

Accepted Answer

Creating a fabricated scenario to manipulate a victim into revealing information

Answer

Pretexting involves an attacker inventing a false situation or identity to gain the victim's trust and extract confidential information.

Question 3

Which attack technique involves following an authorized person through a secured door without using credentials?

Accepted Answer

Tailgating

Answer

Tailgating (or piggybacking) is a physical security attack where an unauthorized person follows an authorized individual into a restricted area.

Question 4

What is the primary goal of security awareness training in an organization?

Accepted Answer

To teach employees to recognize and respond to social engineering attacks

Answer

Security awareness training educates employees on identifying threats like phishing, pretexting, and other manipulation tactics.

Question 5

Which principle of influence do attackers exploit when they create a sense of urgency in phishing emails?

Accepted Answer

Scarcity

Answer

Scarcity and urgency pressure victims into acting quickly without thinking critically, a common manipulation tactic in social engineering.

ALISON - Advance Learning Interactive Systems Online Practice Test