Ethical Hacking Social Engineering 3

Question 1

What is 'whaling' in the context of phishing attacks?

Accepted Answer

Phishing specifically targeting high-profile executives

Answer

Whaling is a highly targeted spear phishing attack aimed at senior executives (CEOs, CFOs), using their authority and access to high-value systems as motivation.

Question 2

Which technique involves searching through discarded documents to find sensitive organizational information?

Accepted Answer

Dumpster diving

Answer

Dumpster diving involves going through trash to find discarded documents containing passwords, network diagrams, employee information, or other sensitive data.

Question 3

What is 'Business Email Compromise' (BEC)?

Accepted Answer

Fraudulent emails impersonating executives to authorize wire transfers or data disclosure

Answer

BEC attacks impersonate executives or trusted partners via email to trick employees into transferring funds, sharing sensitive data, or changing payment details.

Question 4

Which OSINT technique is used to gather email addresses and employee names from a target organization's public information?

Accepted Answer

Harvesting with theHarvester

Answer

theHarvester is an OSINT tool that collects email addresses, names, subdomains, and open ports from public sources like Google, LinkedIn, and Shodan.

Question 5

What is 'quid pro quo' social engineering?

Accepted Answer

Offering a benefit in exchange for information or access

Answer

Quid pro quo attacks offer a service or benefit (e.g., free IT support) in exchange for credentials or information, exploiting the principle of reciprocity.

Ethical Hacking Practice Test

Ethical Hacking Practice Test

Ethical Hacking Social Engineering 3