Social Engineering

Which of the following answer choices is an example of a threat vector type that is typical for voice communication?

Vishing

Which of the terms listed below refers to a threat vector commonly associated with SMS-based communication?

Smishing

Quick Response (QR) code phishing is a form of social engineering in which attackers embed malicious URLs into QR codes. These codes may appear in emails, on posters, product packaging, websites, or digital displays, and can be read with a mobile device's camera or a dedicated QR scanning app. Once scanned, they may redirect users to fake login pages, initiate malware downloads, or capture sensitive information. (T/F)

True

Which of the following answers refers to a phishing attack aimed at specific individuals or groups?

Spear phishing

A senior company executive receives a personalized email, appearing to be from an external law firm, demanding urgent settlement of a fictitious legal matter. This type of phishing attack is an example of:

Whaling

Privacy filter is a protective overlay placed on the computer screen that narrows the viewing angle, so the screen content is only visible directly in front of the monitor and cannot be seen by others nearby. This type of protection provides a countermeasure against:

Shoulder surfing

A visitor without a badge enters a company building right after a delivery worker opens the door. This situation best describes:

Tailgating

A technician receives a call from someone claiming to be a data center manager requesting an immediate password reset for a critical account. This scenario is an example of:

Impersonation

In the context of computer security, the term "Dumpster diving" refers to the practice of searching through trash for discarded documents or storage media. Found items may contain sensitive data, such as employee names, positions, and other confidential information, which can be used for malicious purposes. (T/F)

True