Social Media Security Flashcards

A user receives a direct message on a social media platform from an account that looks like their friend's. The message contains a link with the text, "Is this you in this video?!" and creates a sense of urgency. This is a common example of which type of attack?

Answer: Phishing

This is a classic example of a phishing attack. The attacker impersonates a trusted contact to trick the user into clicking a malicious link, likely leading to a fake login page designed to steal their credentials.

What is the primary security risk of authorizing third-party applications, such as games or quizzes, to access your social media account?

Answer: They can expose your personal data and your friends' data to be harvested or misused.

Third-party apps often request extensive permissions to access profile information, friend lists, and other personal data. If the app developer has poor security practices or malicious intent, this data can be collected, sold, or exposed in a breach, compromising the privacy of both you and your connections.

Which of the following is the MOST effective security measure for preventing unauthorized access to a social media account, even if an attacker has stolen the user's password?

Answer: Enabling two-factor authentication (2FA)

Two-factor authentication (2FA) adds a critical second layer of security. Even if a password is stolen, an attacker cannot gain access without the second factor, which is typically a code generated by an authenticator app or sent to the user's phone.

A user posts their full vacation itinerary, including dates and locations, on their public social media profile before they leave. What is the most significant physical security risk associated with this action?

Answer: It publicly announces that their home will be unoccupied, making it a target for burglars.

Oversharing travel plans in real-time or in advance is a major physical security risk. It acts as a public announcement that a person's home is empty and vulnerable, which is information that burglars can exploit to plan a break-in.

The process of automatically adding geographical coordinates to media like photos and posts is known as what?

Answer: Geotagging

Geotagging is the process of adding geographical identification to media. While it can be useful, it can also create security risks by revealing sensitive locations like your home or daily routines if shared publicly.

When reviewing your social media privacy settings, which option is specifically designed to prevent people from finding your profile by searching for your email address or phone number?

Answer: Controlling who can look you up using provided contact information

Most social media platforms have a specific privacy setting to control 'discoverability'. This option allows you to prevent others from finding your account by entering your phone number or email address into the platform's search function.