Certified Ethical Hacker Social Engineering and Physical Security

Question 1

What is spear phishing and how does it differ from regular phishing?

Accepted Answer

Targeted phishing aimed at specific individuals using personalized information, versus mass generic emails

Answer

Using a fishing metaphor to describe hacking

Answer

A type of network scanning technique

Answer

Phishing that uses spear-like USB devices

Question 2

What is pretexting in social engineering?

Accepted Answer

Creating a fabricated scenario to manipulate a victim into providing information or access

Answer

Writing pretext for a book about hacking

Answer

Testing network pretexts before deployment

Answer

Sending pre-formatted text messages

Question 3

What is tailgating (piggybacking) in physical security?

Accepted Answer

Following an authorized person through a secured door without presenting credentials

Answer

Parking too close to a building

Answer

Monitoring network traffic from behind a firewall

Answer

Tracking someone's online activities

Question 4

What is a watering hole attack?

Accepted Answer

Compromising a website frequently visited by the target group to infect their systems

Answer

Poisoning a physical water supply

Answer

Flooding a network with data packets

Answer

Creating fake Wi-Fi hotspots near water features

Question 5

What is shoulder surfing and how can it be prevented?

Accepted Answer

Observing someone's screen or keyboard to steal credentials; prevented with privacy screens and awareness

Answer

Surfing the internet over someone's shoulder using their Wi-Fi

Answer

A type of network packet sniffing

Answer

A physical attack on server room equipment

Question 6

What is vishing and how does it differ from phishing?

Accepted Answer

Voice-based phishing using phone calls to extract information, versus email-based phishing

Answer

A visual form of phishing using images

Answer

A type of phishing that uses virtual reality

Answer

Video-based phishing using fake video calls