PenTest+ PenTest+ Social Engineering & Physical Security

Question 1

Which social engineering technique involves creating a fabricated scenario to manipulate a target into divulging sensitive information?

Accepted Answer

Pretexting

Answer

Phishing

Answer

Tailgating

Answer

Dumpster diving

Question 2

What is 'vishing' as a social engineering attack vector?

Accepted Answer

Voice phishing conducted over telephone calls to impersonate trusted entities

Answer

Visual phishing using convincing fake websites

Answer

Video-based deepfake social engineering attacks

Answer

Phishing attacks delivered via SMS messages

Question 3

What is 'spear phishing' and how does it differ from standard phishing?

Accepted Answer

Targeted phishing customized with personal details about a specific individual or organization

Answer

Phishing using spear-shaped graphic elements in emails

Answer

A mass phishing campaign sent to millions of recipients at once

Answer

Phishing that targets the fishing and maritime industry specifically

Question 4

Which tool is specifically designed for conducting social engineering campaigns and phishing simulations during pentests?

Accepted Answer

Social-Engineer Toolkit (SET)

Answer

Burp Suite

Answer

Metasploit Framework

Answer

Aircrack-ng

Question 5

Which social engineering influence principle exploits a target's sense of obligation after receiving something of value?

Accepted Answer

Reciprocity

Answer

Scarcity

Answer

Social proof

Answer

Authority

Question 6

What does a 'quid pro quo' social engineering attack involve?

Accepted Answer

Offering a service or benefit in exchange for information or system access

Answer

A type of phishing email with Latin-themed lures

Answer

A SQL injection technique using Latin query syntax

Answer

A spear phishing campaign targeting Latin American organizations