Examkin

Question

Difficulty: EasySocial Engineering and Threat Types

Match each social engineering threat vector on the left with its corresponding attack description on the right.

  • SmishingUsing deceptive SMS text messages to trick individuals into revealing sensitive personal data or credentials.
  • TyposquattingRegistering domain names with common spelling mistakes of popular websites to lure unsuspecting users.
  • PretextingInventing a false story or scenario to manipulate a target into disclosing confidential corporate information.
  • Watering HoleInfecting a specific third-party website regularly visited by members of a targeted organization.

Answer

Smishing corresponds to SMS text message phishing; Typosquatting corresponds to taking advantage of misspelled domain names; Pretexting corresponds to inventing a false story to gain information; Watering Hole corresponds to compromising websites frequently visited by target groups.
Smishing uses cellular SMS text messages; Typosquatting exploits browser URL entry mistakes; Pretexting relies on an invented narrative to manipulate targets; Watering Hole attacks compromise specific sites visited by targeted organizations.

Step-by-Step Solution

1
Analyze the attack medium and methodology described in each item.
Identify that text messaging maps to Smishing, misspelled web addresses map to Typosquatting, crafted deceptive narratives map to Pretexting, and infected destination websites map to Watering Hole attacks.
Social engineering categories are defined by their specific delivery mechanisms and psychological tactics.

Key Concept

Social Engineering Vectors and Attack Methodologies
Estimated Time:1m 0s
Rate this question

Topics

Social Engineering and Threat Types

More questions from this topic