| Term Smart phones give the owner of the device the ability to download security updates. Definition False | Term What social engineering principal convinces a victim an immediate action is needed? Definition urgency |
|---|
| Term Smart phones give the owner of the device the ability to download security updates. Definition False | Term What social engineering principal convinces a victim an immediate action is needed? Definition urgency |
|---|
| Term Smart phones give the owner of the device the ability to download security updates. Definition False | Term What social engineering principal convinces a victim an immediate action is needed? Definition urgency | Term One of the first popular symmetric cryptography algorithms was RSA. Definition False |
|---|
Social Engineering relies heavily on the six Principles of Influence established by Robert Cialdini, a behavioral psychologist, and author of Influence: The Psychology of Persuasion. Those six key Principles are:
Reciprocity, Commitment and Consistency, Social Proof, Authority, Liking, and Scarcity
.
What specific type of phishing attack uses the telephone to target a victim?
4.
Smishing and vishing
. With both smishing and vishing, telephones replace emails as the method of communication. Smishing involves criminals sending text messages (the content of which is much the same as with email phishing), and vishing involves a telephone conversation.
What social engineering principal frightens and coerces a victim by using threats?
Social engineering impersonation
means to masquerade as a real or fictitious character and then play out the role of that person on a victim.
What type of malware is heavily dependent on?
| Question Answer | Unlike other malware, a ______ is heavily dependent on the user for survival. virus | A _____ virus is loaded into random access memory each time the computer is turned on and infects files that are opened by the user or the operating system. resident |
|---|
What length SSL and TLS keys are generally considered to be strong?
4096
is the answer.
Is a flaw or weakness that allows a threat agent to bypass security?
| Term Definition | threat liklihood the probability that a threat will actually occur | threat vector the means by which an attack could occur | transference transferring the risk to a third party | vulnerability a flaw or weakness that allows a threat agent to bypass security. |
|---|
What can constitute a loss?
- theft of information.
- a delay in transmitting information that results in a financial penalty.
- the loss of good will or a reputation.
- all of the above.
- Phishing. …
- Vishing and Smishing. …
- Pretexting. …
- Baiting. …
- Tailgating and Piggybacking. …
- Quid Pro Quo. …
- Cyber Threats Beyond Social Engineering.
- Phishing. Phishing is the most common type of social engineering attack. …
- Spear Phishing. A social engineering technique known as Spear Phishing can be assumed as a subset of Phishing. …
- Vishing. …
- Pretexting. …
- Baiting. …
- Tailgating. …
- Quid pro quo.
- Baiting. As its name implies, baiting attacks use a false promise to pique a victim’s greed or curiosity. …
- Scareware. Scareware involves victims being bombarded with false alarms and fictitious threats. …
- Pretexting. …
- Phishing. …
- Spear phishing.
What are the 2 most common types of phishing attacks?
- Spear Phishing.
- Whaling.
- Vishing.
- Email Phishing.
What are examples of phishing attacks?
- Phishing Email. Phishing emails still comprise a large portion of the world’s yearly slate of devastating data breaches. …
- Spear Phishing. …
- Link Manipulation. …
- Fake Websites. …
- CEO Fraud. …
- Content Injection. …
- Session Hijacking. …
- Malware.
What is the most common example of phishing?
- The Fake Invoice Scam. Let’s start with arguably the most popular phishing template out there – the fake invoice technique. …
- Email Account Upgrade Scam. …
- Advance-fee Scam. …
- Google Docs Scam. …
- PayPal Scam. …
- Message From HR Scam. …
- Dropbox Scam.
