Ethical Hacking Social Engineering

Question 1

What is 'spear phishing' as opposed to regular phishing?

Accepted Answer

Targeted phishing aimed at a specific individual using personalized information

Answer

Phishing using phone calls

Answer

Mass phishing emails sent to thousands of recipients

Answer

Phishing through SMS messages

Question 2

Which social engineering technique involves an attacker calling a target while pretending to be a trusted authority?

Accepted Answer

Vishing

Answer

Phishing

Answer

Smishing

Answer

Baiting

Question 3

What is 'pretexting' in social engineering?

Accepted Answer

Fabricating a scenario to manipulate a target into divulging information

Answer

Creating a fake website to capture credentials

Answer

Sending malware via email attachments

Answer

Intercepting phone calls

Question 4

What does the social engineering term 'baiting' refer to?

Accepted Answer

Luring victims with promises of a reward or curiosity-inducing item (e.g., infected USB drive)

Answer

Sending unsolicited emails

Answer

Calling targets under false pretenses

Answer

Shoulder surfing to steal credentials

Question 5

Which framework is commonly used by penetration testers to automate social engineering attacks?

Accepted Answer

Social-Engineer Toolkit (SET)

Answer

Nessus

Answer

Metasploit

Answer

Burp Suite

Question 6

What is 'tailgating' in the context of physical social engineering?

Accepted Answer

Following an authorized person through a secured door without using credentials

Answer

Accessing a network by piggybacking on another's Wi-Fi

Answer

Copying an RFID badge from a distance

Answer

Leaving malware on a shared drive