eJPT Social Engineering Techniques 3

Question 1

What distinguishes 'whaling' from standard spear phishing?

Accepted Answer

Whaling targets high-level executives rather than general employees

Answer

Whaling specifically targets high-value executives (CEOs, CFOs) using highly customized and convincing messages.

Question 2

An attacker sends an email appearing to come from a company's CEO asking the CFO to urgently wire funds. This attack is specifically known as:

Accepted Answer

Business Email Compromise (BEC)

Answer

BEC involves impersonating executives via email to manipulate financial staff into transferring funds.

Question 3

Which of the following is an example of 'tailgating' in physical social engineering?

Accepted Answer

Following an authorized employee through a secured door without using credentials

Answer

Tailgating (piggybacking) means physically following an authorized person through a secured entry point without authenticating.

Question 4

What is 'clone phishing'?

Accepted Answer

Replicating a legitimate email and replacing its links with malicious ones

Answer

Clone phishing takes a real, previously delivered email, duplicates it, and replaces legitimate links or attachments with malicious ones.

Question 5

Which psychological principle does an attacker exploit when they say 'Only 3 licenses left — act now or lose access' in a phishing email?

Accepted Answer

Scarcity

Answer

Scarcity creates urgency by implying limited availability, pressuring the victim to act without thinking critically.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test