Certified Ethical Hacker Social Engineering and Physical Security 3 — Questions and Answers
Question 1: An attacker calls an employee pretending to be tech support and asks them to read out a one-time code just texted to them. This voice-based attack is called:
- Vishing (Correct answer)
- Smishing
- Tailgating
- Watering hole
Correct answer: Vishing
Vishing (voice phishing) uses phone calls to socially engineer victims into revealing sensitive data.
Question 2: What is 'shoulder surfing' in the context of physical security?
- Observing a victim's screen or keypad to steal information (Correct answer)
- Riding behind an authorized person through a door
- Searching trash for documents
- Cloning an RFID badge
Correct answer: Observing a victim's screen or keypad to steal information
Shoulder surfing is directly watching someone enter credentials, PINs, or view confidential data.
Question 3: A fraudulent SMS message claiming a package delivery failed and asking the user to click a link is an example of:
- Smishing (Correct answer)
- Whaling
- Pharming
- Baiting
Correct answer: Smishing
Smishing is phishing conducted through SMS text messages.
Question 4: Which physical control prevents an attacker from cloning a proximity badge by capturing its RFID signal from a distance?
- Shielded badge holders (RFID-blocking sleeves) (Correct answer)
- Longer Wi-Fi keys
- Disabling Bluetooth on phones
- Brighter lobby lighting
Correct answer: Shielded badge holders (RFID-blocking sleeves)
RFID-blocking sleeves prevent unauthorized reading or cloning of proximity card signals.
Question 5: In a 'quid pro quo' social engineering attack, the attacker primarily offers:
- A benefit or service in exchange for information or access (Correct answer)
- A threat of immediate legal action
- A free physical USB device
- Proof of widespread peer participation
Correct answer: A benefit or service in exchange for information or access
Quid pro quo trades something of value (e.g., 'free IT help') for the victim's cooperation.
Question 6: An attacker compromises a website frequently visited by employees of a target company to infect them. This technique is known as a:
- Watering hole attack (Correct answer)
- Whaling attack
- Dumpster dive
- Mantrap bypass
Correct answer: Watering hole attack
A watering hole attack poisons a trusted, commonly visited site to compromise its specific visitors.
Question 7: Which is the BEST first response if an employee suspects they fell for a phishing email and entered their credentials?
- Immediately report it and change the affected password (Correct answer)
- Delete the email and say nothing
- Forward the email to all colleagues
- Reboot the computer and ignore it
Correct answer: Immediately report it and change the affected password
Prompt reporting and password changes limit the window an attacker can use the stolen credentials.
Certified Ethical Hacker Social Engineering and Physical Security 3
An attacker calls an employee pretending to be tech support and asks them to read out a one-time code just texted to them.
This voice-based attack is called: