CIPA Social Engineering & Phishing Attacks

Question 1

What is social engineering in the context of identity theft?

Accepted Answer

Manipulating people psychologically to divulge confidential information

Answer

Social engineering exploits human psychology rather than technical vulnerabilities, tricking victims into revealing sensitive information or performing actions that compromise their security.

Question 2

Which type of phishing attack is specifically targeted at a named individual or organization rather than sent broadly?

Accepted Answer

Spear phishing

Answer

Spear phishing targets a specific individual or organization using personalized information to make the attack more convincing and harder to detect.

Question 3

What is 'vishing' as it relates to social engineering identity theft?

Accepted Answer

A voice-based phishing attack conducted over telephone calls

Answer

Vishing (voice phishing) uses phone calls where attackers impersonate legitimate entities such as the IRS, banks, or tech support to steal personal information.

Question 4

Which red flag is MOST commonly associated with a phishing email?

Accepted Answer

The email creates urgency and requests immediate action on personal data

Answer

Phishing emails typically create a false sense of urgency to pressure victims into acting quickly without verifying the request, such as 'Your account will be closed in 24 hours.'

Question 5

What is 'pretexting' in social engineering?

Accepted Answer

Creating a fabricated scenario to gain a victim's trust and extract information

Answer

Pretexting involves creating a believable fabricated story or identity (e.g., posing as a bank auditor) to manipulate the victim into providing sensitive personal information.

(CIPA) Certified Identity Protection Advisor Practice Test

(CIPA) Certified Identity Protection Advisor Practice Test

CIPA Social Engineering & Phishing Attacks