CVA CVA Social Engineering & Physical Security Testing

Question 1

Which social engineering technique involves impersonating a trusted authority figure via phone to extract sensitive information from an employee?

Accepted Answer

Vishing

Answer

Phishing

Answer

Smishing

Answer

Pretexting

Question 2

During a physical security assessment, what is 'tailgating' (piggybacking)?

Accepted Answer

Following an authorized person through a secured access-controlled door without using credentials

Answer

Installing a keylogger on an unattended workstation

Answer

Cloning an employee's RFID badge

Answer

Intercepting wireless network traffic

Question 3

What is 'pretexting' in the context of social engineering assessments?

Accepted Answer

Creating a fabricated scenario or false identity to manipulate a target into providing information or access

Answer

Sending malicious email attachments

Answer

Setting up a rogue wireless access point

Answer

Intercepting and modifying network communications

Question 4

Which attack involves sending fraudulent text messages to trick recipients into clicking malicious links or providing sensitive information?

Accepted Answer

Smishing

Answer

Vishing

Answer

Whaling

Answer

Spear phishing

Question 5

During a physical security assessment, what does 'dumpster diving' evaluate?

Accepted Answer

Whether sensitive information is discarded in an accessible manner without proper destruction

Answer

Network traffic from discarded devices

Answer

Whether building dumpsters have adequate fire suppression

Answer

Employee physical fitness compliance

Question 6

What is 'baiting' in a social engineering context?

Accepted Answer

Leaving infected physical media (USB drives) in locations where employees may find and use them

Answer

Sending targeted spear-phishing emails to executives

Answer

Impersonating a vendor during a phone call

Answer

Creating a fake login portal to capture credentials