Social Engineering and Malware Overview

Social Engineering

• Following someone into a secure area without their knowledge is a form of social engineering.
• Redirecting a user to a fake website via DNS spoofing is a social engineering tactic.
• Manipulating people to gain unauthorized access or information is a social engineering technique.
• Gathering information before launching an attack is part of reconnaissance.
• Phishing attacks using SMS/text messages are forms of social engineering.
• Gaining access to a secure area with the consent of an employee is a social engineering tactic.
• Creating a fabricated scenario to gain trust is social engineering.
• Making the target feel comfortable or liked is a social engineering tactic.

Malware and AAA

• Malware that propagates over network links and consumes bandwidth is a Trojan.
• Logs all local activity on a device, including screenshots, allowing a user to see local system activity to gain access is a virus.
• Allows a user to authenticate once and gain access to multiple systems is Single Sign-On (SSO).
• Method of trying all possible combinations to guess a password is Brute Force Attack.
• A knowledge-based authentication factor (e.g., password) is something you know.
• Malware that spreads within code without authorization is a worm.
• Malware concealed within a legitimate program is spyware.
• Auditing the usage of an account is accounting.

Explore the key tactics and techniques used in social engineering and malware. This quiz covers various forms of manipulation, recognition tactics, and the impact of malware on network security. Test your knowledge on how these threats function and how to recognize them.