Certified Ethical Hacker Social Engineering and Physical Security 3

Question 1

An attacker calls an employee pretending to be tech support and asks them to read out a one-time code just texted to them. This voice-based attack is called:

Accepted Answer

Vishing

Answer

Vishing (voice phishing) uses phone calls to socially engineer victims into revealing sensitive data.

Question 2

What is 'shoulder surfing' in the context of physical security?

Accepted Answer

Observing a victim's screen or keypad to steal information

Answer

Shoulder surfing is directly watching someone enter credentials, PINs, or view confidential data.

Question 3

A fraudulent SMS message claiming a package delivery failed and asking the user to click a link is an example of:

Accepted Answer

Smishing

Answer

Smishing is phishing conducted through SMS text messages.

Question 4

Which physical control prevents an attacker from cloning a proximity badge by capturing its RFID signal from a distance?

Accepted Answer

Shielded badge holders (RFID-blocking sleeves)

Answer

RFID-blocking sleeves prevent unauthorized reading or cloning of proximity card signals.

Question 5

In a 'quid pro quo' social engineering attack, the attacker primarily offers:

Accepted Answer

A benefit or service in exchange for information or access

Answer

Quid pro quo trades something of value (e.g., 'free IT help') for the victim's cooperation.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Social Engineering and Physical Security 3