Q. What security control may need to be bypassed or disabled during a physical penetration test?

View solution

Q. What technique involves recording an entire physical penetration test attempt using a concealed camera?

View solution

Q. What is the goal of a dumpster diving expedition during a physical penetration test?

View solution

Q. What is the primary focus of social engineering?

View solution

Q. What is the foundation of many social engineering attacks?

View solution

Q. In social engineering, what relies on the target feeling indebted or that they need to return a favor?

View solution

Q. What social engineering tactic focuses on making the target believe that you have the power or right to ask them to perform actions or provide information?

View solution

Q. In social engineering, what creates a sense of urgency by conveying that the action needs to be performed?

View solution

Q. What is a common target in social engineering that involves the fear that something will go wrong or that they will be punished if they do not respond or help?

View solution

Q. What is elicitation in the context of social engineering?

View solution

Q. What is a common tactic in elicitation that involves using open-ended or leading questions?

View solution

Q. What does impersonation involve in social engineering?

View solution

Q. What do quid pro quo attacks rely on in social engineering?

View solution

Q. What is the term for watching over a target's shoulder to obtain valuable information?

View solution

Q. In the context of penetration testing, under what circumstances might bribery be considered a valid technique?

View solution

Q. What is vishing in the context of phishing attacks?

View solution

Q. What is whaling in the context of phishing attacks?

View solution

Q. What is the main aim of phishing attempts?

View solution

Q. What is a watering hole attack in the context of web-based social engineering?

View solution

Q. What is the purpose of combining social engineering techniques with technical tools in penetration testing?

View solution