Phishing and Social Engineering v6 (Test-Out Exam)

What is phishing?

A type of social engineering that uses e-mail

What is smishing?

A type of social engineering that uses short message service (SMS) messages

You receive what you suspect to be a phishing attempt. What should you do?

Report or delete the message, depending on organizational policy

You receive what you suspect to be a smishing attempt. What should you do?

Report or delete the message, depending on organizational policy

You receive what you suspect to be a spear phishing attempt. What should you do?

Report or delete the message, depending on organizational policy

You receive what you suspect to be a whaling attempt. What should you do

Report or delete the message, depending on organizational policy

You are a senior official in your organization and recently returned from a professional conference. You receive an e-mail from the conference organizers asking you to verify your contact information. It contains all of your valid contact information. There was no mention of receiving this kind of e-mail during the conference. Is this likely to be a social engineering attempt?

No

What is spear phishing?

A type of social engineering that targets a specific individual or group

What is whaling?

A type of social engineering that targets senior leaders

What is vishing?

A type of social engineering that uses voice calls

You receive an e-mail from a friend with a link to an article they recently told you about. The URL destination is a well-known publication. Is this likely to be a social engineering attempt?

No

You receive what you suspect to be a vishing attempt. What should you do?

Report or disregard it, depending on organizational policy

You receive a phone call from the Internal Revenue Service stating that action is being taken against you for failure to pay taxes. The caller asks for your Social Security Number and payment information. Is this likely to be a social engineering attempt?

Yes

You receive a text message notifying you that you are eligible for a safe driving bonus from your auto insurance company. The message addresses you by name and provides a link to claim your bonus. The URL does not match the name of your insurance company. Is this likely to be a phishing attempt?

Yes

You receive an e-mail from a senior leader in your organization requesting your cell phone number. The e-mail is sent from a personal e-mail address rather than an organizational e-mail address. You rarely have contact with this individual. Is this likely to be a social engineering attempt?

Yes