Ethical Hacking Social Engineering

Question 1

What is 'spear phishing' as opposed to regular phishing?

Accepted Answer

Targeted phishing aimed at a specific individual using personalized information

Answer

Spear phishing is a targeted attack using personal details about the victim (name, employer, colleagues) to craft convincing emails that appear legitimate.

Question 2

Which social engineering technique involves an attacker calling a target while pretending to be a trusted authority?

Accepted Answer

Vishing

Answer

Vishing (voice phishing) uses phone calls to deceive targets into revealing sensitive information by impersonating IT support, banks, or government agencies.

Question 3

What is 'pretexting' in social engineering?

Accepted Answer

Fabricating a scenario to manipulate a target into divulging information

Answer

Pretexting involves creating a fabricated scenario (pretext) to manipulate a target into providing information or performing actions they otherwise wouldn't.

Question 4

What does the social engineering term 'baiting' refer to?

Accepted Answer

Luring victims with promises of a reward or curiosity-inducing item (e.g., infected USB drive)

Answer

Baiting entices victims with something appealing (a free USB drive, download link) that contains malware, exploiting curiosity or greed to execute the attack.

Question 5

Which framework is commonly used by penetration testers to automate social engineering attacks?

Accepted Answer

Social-Engineer Toolkit (SET)

Answer

The Social-Engineer Toolkit (SET) is an open-source framework designed to automate social engineering attacks including spear phishing, credential harvesting, and fake websites.

Ethical Hacking Practice Test

Ethical Hacking Practice Test

Ethical Hacking Social Engineering