CSCU Social Media Security 2

Question 1

What is social media account hijacking?

Accepted Answer

Unauthorized access and takeover of someone's social media account, typically through stolen credentials or session tokens

Answer

Account hijacking occurs when an attacker gains unauthorized access to a social media account through phishing, credential stuffing, session theft, or exploiting security vulnerabilities.

Question 2

Why is oversharing personal information on social media a security risk?

Accepted Answer

Attackers can use shared personal details for social engineering, identity theft, and to answer security questions

Answer

Personal information shared on social media—birthdays, pet names, schools, vacation plans—can be harvested by attackers for identity theft, social engineering attacks, and to answer account security questions.

Question 3

What is a social media phishing attack?

Accepted Answer

Using fake messages, posts, or pages on social media platforms to trick users into revealing credentials or clicking malicious links

Answer

Social media phishing uses deceptive messages, fake login pages, fraudulent posts, or impersonated profiles on social platforms to trick users into revealing personal information or clicking malicious links.

Question 4

Why should you regularly review the third-party applications connected to your social media accounts?

Accepted Answer

Connected apps may retain access permissions and can access your data, post on your behalf, or be compromised themselves

Answer

Third-party apps connected to social media retain their granted permissions until revoked, potentially accessing personal data, posting content, or becoming a security risk if the third-party app is compromised.

Question 5

What is the security risk of using public social media profiles for professional networking?

Accepted Answer

Attackers can harvest professional details to craft targeted spear-phishing and social engineering attacks against you or your organization

Answer

Public professional profiles provide attackers with organizational structure, job roles, projects, and business relationships that enable highly targeted spear-phishing and social engineering attacks.

CSCU - Certified Secure Computer User Practice Test

CSCU - Certified Secure Computer User Practice Test

CSCU Social Media Security 2