CompTIA Security+ Section 4

What is social engineering?

Tricking people into giving up info or access.

What are motivational triggers?

Psychological tactics used to fool people.

What is authority in social engineering?

Pretending to be someone in charge.

What is urgency in social engineering?

Making people act fast without thinking.

What is social proof?

Using others’ behavior to influence someone.

What is scarcity?

Making something seem limited to cause panic.

What is likability in attacks?

Being friendly to gain trust.

What is fear in social engineering?

Scaring someone to get them to act.

What is impersonation?

Pretending to be someone else to gain access.

What is brand impersonation?

Faking a trusted company to trick users.

What is typosquatting?

Using misspelled domains to catch users off guard.

What are watering hole attacks?

Infecting sites your target visits often.

What is pretexting?

Making up a story to get info.

What is phishing?

Tricking many users with fake emails or sites.

What is spear phishing?

Phishing aimed at one specific person.

What is whaling?

Phishing aimed at executives or big targets.

What is business email compromise (BEC)?

Hijacking or spoofing business emails for fraud.

What is vishing?

Phishing done through phone calls.

What is smishing?

Phishing done through text messages.

What are unusual requests in phishing?

Requests that feel out of place or odd.

What are mismatched URLs?

Links that don’t match where they claim to go.

What are tweaked email addresses?

Emails that look real but have small changes.

Why is poor grammar and spelling a red flag?

Scammers often make language mistakes.

What are frauds and scams?

Tricks to steal money or data.

What is identity theft?

Stealing someone's personal info for fraud.

What is an invoice scam?

Fake bills sent to get unauthorized payments.

What are influence campaigns?

Long-term efforts to change opinions.

What is misinformation?

False info shared by mistake.

What is disinformation?

False info shared on purpose.

What is diversion theft?

Tricking a delivery or transport to steal goods.

What are hoaxes?

False warnings or alerts meant to mislead.

What is shoulder surfing?

Watching someone type to steal info.

What is dumpster diving?

Looking through trash to find useful data.

What is eavesdropping?

Listening in on private conversations.

What is baiting?

Leaving something tempting to lure victims.