CVA CVA Social Engineering & Physical Security Testing

Question 1

Which social engineering technique involves impersonating a trusted authority figure via phone to extract sensitive information from an employee?

Accepted Answer

Vishing

Answer

Vishing (voice phishing) uses phone calls where attackers impersonate IT support, executives, or other authorities to manipulate employees into revealing credentials or sensitive data.

Question 2

During a physical security assessment, what is 'tailgating' (piggybacking)?

Accepted Answer

Following an authorized person through a secured access-controlled door without using credentials

Answer

Tailgating occurs when an unauthorized individual follows closely behind an authorized person to gain physical access to a restricted area without using their own credentials.

Question 3

What is 'pretexting' in the context of social engineering assessments?

Accepted Answer

Creating a fabricated scenario or false identity to manipulate a target into providing information or access

Answer

Pretexting involves crafting a believable false scenario or identity (e.g., IT auditor, delivery person) to gain the target's trust and extract sensitive information or physical access.

Question 4

Which attack involves sending fraudulent text messages to trick recipients into clicking malicious links or providing sensitive information?

Accepted Answer

Smishing

Answer

Smishing (SMS phishing) uses text messages to deliver malicious links or pretexts designed to steal credentials, install malware, or extract sensitive information.

Question 5

During a physical security assessment, what does 'dumpster diving' evaluate?

Accepted Answer

Whether sensitive information is discarded in an accessible manner without proper destruction

Answer

Dumpster diving assesses whether an organization properly destroys sensitive documents and media before disposal, as improperly discarded information can aid attackers.

(CVA) Certified Vulnerability Assessor Practice Test

(CVA) Certified Vulnerability Assessor Practice Test

CVA CVA Social Engineering & Physical Security Testing