CIPA Social Engineering & Phishing Attacks

Question 1

What is social engineering in the context of identity theft?

Accepted Answer

Manipulating people psychologically to divulge confidential information

Answer

Using malware to extract personal data from computers

Answer

Hacking into social media accounts using automated tools

Answer

Stealing physical mail to obtain personal data

Question 2

Which type of phishing attack is specifically targeted at a named individual or organization rather than sent broadly?

Accepted Answer

Spear phishing

Answer

Mass phishing

Answer

Clone phishing

Answer

Vishing

Question 3

What is 'vishing' as it relates to social engineering identity theft?

Accepted Answer

A voice-based phishing attack conducted over telephone calls

Answer

A phishing attack conducted through video conferencing platforms

Answer

A phishing attack using virtual reality environments

Answer

A method of intercepting VoIP communications

Question 4

Which red flag is MOST commonly associated with a phishing email?

Accepted Answer

The email creates urgency and requests immediate action on personal data

Answer

The email contains a company logo

Answer

The email was sent during business hours

Answer

The email includes a physical mailing address

Question 5

What is 'pretexting' in social engineering?

Accepted Answer

Creating a fabricated scenario to gain a victim's trust and extract information

Answer

Sending fraudulent text messages to steal information

Answer

Intercepting text communications between two parties

Answer

Using pre-written scripts in phishing emails

Question 6

What is 'smishing' as used in identity theft attacks?

Accepted Answer

Phishing attacks conducted via SMS text messages

Answer

Phishing attacks conducted through social media direct messages

Answer

A technique for spoofing email sender addresses

Answer

A method of stealing credentials through shared Wi-Fi

Question 7

What is 'pharming' in the context of online identity threats?

Accepted Answer

Redirecting users from a legitimate website to a fraudulent one without their knowledge

Answer

Mass-distributing phishing emails to thousands of recipients

Answer

Harvesting personal data from agricultural industry databases

Answer

Using automated bots to guess passwords on websites