Phishing and social engineering in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Phishing Techniques

Which of the following best describes a common method used in phishing attacks?

A Physically breaking into a building to steal computers

B Using software to scan for open Wi-Fi networks

C Sending an email that appears to be from a trusted source asking for personal information

D Installing antivirus software on a computer

💡 Hint

Think about how attackers trick people into giving away sensitive data.

Phishing commonly involves sending fake emails that look real to trick people into sharing personal information.

📋 Factual

intermediate

Identifying Social Engineering Examples

Which of the following is an example of social engineering?

A A hacker exploiting a software vulnerability to gain access

B An attacker calling an employee pretending to be IT support to get their password

C Using a brute force attack to guess a password

D Installing malware through a malicious website

💡 Hint

Social engineering involves manipulating people rather than technology.

Social engineering tricks people into giving information, like pretending to be IT support to get passwords.

🔍 Analysis

advanced

Analyzing Phishing Email Characteristics

Which feature in an email is most likely a sign of a phishing attempt?

A An email with urgent language asking to verify account details via a suspicious link

B An email confirming a recent purchase you made

C An email from a known contact with a personalized greeting

D An email with proper grammar and no links

💡 Hint

Phishing emails often try to create a sense of urgency and ask for sensitive info.

Urgent requests with suspicious links asking for account verification are common phishing signs.

❓ Comparison

advanced

Comparing Phishing and Spear Phishing

What is the main difference between phishing and spear phishing attacks?

A Phishing requires malware; spear phishing does not

B Phishing uses phone calls; spear phishing uses emails only

C Phishing is legal; spear phishing is illegal

D Phishing targets many people broadly; spear phishing targets specific individuals or organizations

💡 Hint

Consider how attackers choose their victims in each case.

Phishing casts a wide net, while spear phishing is a focused attack on specific targets.

❓ Reasoning

expert

Evaluating Defense Strategies Against Social Engineering

Which defense strategy is most effective in reducing the risk of social engineering attacks?

A Training employees to recognize and report suspicious requests

B Regularly updating software to patch vulnerabilities

C Installing firewalls to block unauthorized network access

D Using strong passwords for all accounts

💡 Hint

Think about how social engineering exploits human behavior.

Training people to spot and report suspicious behavior helps prevent social engineering attacks effectively.