Ethical Hacking Social Engineering 2

Question 1

What is a 'watering hole attack'?

Accepted Answer

Infecting websites frequently visited by the target organization

Answer

A watering hole attack compromises websites that a target group regularly visits, infecting visitors with malware when they browse the compromised site.

Question 2

Which psychological principle does an attacker exploit when claiming 'Only 3 spots left — act now!' in a phishing email?

Accepted Answer

Scarcity

Answer

Scarcity exploits the fear of missing out (FOMO) by creating urgency, pressuring targets to act quickly without carefully evaluating the legitimacy of the request.

Question 3

What is 'smishing'?

Accepted Answer

Phishing via SMS text messages

Answer

Smishing uses SMS text messages to deliver phishing links or request sensitive information, often impersonating banks, delivery services, or government agencies.

Question 4

Which concept describes the tendency to comply with someone perceived as an authority figure?

Accepted Answer

Authority

Answer

Authority bias causes people to comply with requests from individuals perceived as experts or in positions of power, making impersonation of executives or IT staff highly effective.

Question 5

What is 'shoulder surfing' in social engineering?

Accepted Answer

Physically observing a target's screen or keyboard to steal credentials

Answer

Shoulder surfing involves physically observing a person entering credentials or sensitive information, typically in public places like coffee shops or airports.

Ethical Hacking Practice Test

Ethical Hacking Practice Test

Ethical Hacking Social Engineering 2