eJPT Social Engineering Techniques 4

Question 1

An attacker poses as a fire marshal and walks through an office taking photos of workstations under the guise of a 'safety inspection.' This is best described as:

Accepted Answer

Impersonation-based physical social engineering

Answer

Impersonation involves assuming a false identity (e.g., fire marshal) to gain physical access and gather intelligence.

Question 2

Which tool is commonly used during penetration tests to generate convincing phishing emails and credential-harvesting pages?

Accepted Answer

Social-Engineer Toolkit (SET)

Answer

The Social-Engineer Toolkit (SET) automates phishing campaigns and credential harvesting site cloning for authorized engagements.

Question 3

What does 'OSINT' stand for and how does it relate to social engineering?

Accepted Answer

Open Source Intelligence — used to gather target information from public sources before an attack

Answer

OSINT (Open Source Intelligence) involves collecting publicly available information to build detailed profiles for targeted social engineering attacks.

Question 4

A red team attacker recovers printed emails and internal memos from a company's recycling bin. This technique is called:

Accepted Answer

Dumpster diving

Answer

Dumpster diving involves searching through discarded materials to find sensitive information useful for crafting attacks.

Question 5

Which of the following BEST mitigates the risk of social engineering attacks targeting employees?

Accepted Answer

Regular security awareness training with simulated phishing exercises

Answer

Security awareness training combined with simulated phishing teaches employees to recognize and report social engineering attempts.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Social Engineering Techniques 4