Social engineering awareness in Intro to Computing - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is social engineering in the context of cybersecurity?

Social engineering is a trick used by attackers to manipulate people into giving away confidential information or access, often by pretending to be someone trustworthy.

beginner

Name three common social engineering techniques.

Phishing (fake emails or messages), Pretexting (creating a fake story to gain trust), and Tailgating (following someone into a secure place without permission).

beginner

Why is it important to verify the identity of someone asking for sensitive information?

Because attackers often pretend to be trusted people to trick you. Verifying identity helps prevent giving access or information to the wrong person.

beginner

What should you do if you receive an unexpected email asking for your password?

Do not reply or click any links. Instead, contact the person or company directly using a known phone number or website to check if the request is real.

beginner

How can regular training help prevent social engineering attacks?

Training teaches people to recognize tricks and suspicious behavior, so they can avoid falling for scams and protect themselves and their organization.

Which of the following is an example of social engineering?

A A firewall blocking unauthorized access

B A computer virus spreading automatically

C A software update notification

D An email pretending to be your bank asking for your password

Social engineering involves tricking people, like fake emails asking for passwords.

What is 'phishing'?

A Installing antivirus software

B Physically stealing a computer

C Sending fake messages to steal information

D Backing up data regularly

Phishing is sending fake emails or messages to trick people into giving sensitive info.

If someone you don’t know asks for your login details, what should you do?

A Give them the details quickly

B Ignore and report the request

C Share only part of the details

D Ask them to call back later

Never share login details; report suspicious requests to stay safe.

Tailgating in social engineering means:

A Following someone into a secure area without permission

B Sending fake emails

C Hacking a password

D Installing malware

Tailgating is when someone follows another person into a restricted place without authorization.

Why should you be cautious about clicking links in unexpected emails?

A They might lead to fake websites that steal your info

B They always contain useful information

C They help speed up your computer

D They are safe if the email looks professional

Links in fake emails can lead to dangerous sites designed to steal your data.

Explain what social engineering is and give two examples of how attackers use it.

Think about how people are tricked rather than technical hacks.

Describe three ways you can protect yourself from social engineering attacks.

Focus on actions you can take when someone asks for sensitive info.

Practice

1. What is the main goal of social engineering in computing?

easy

A. To trick people into giving private information

B. To hack computer software directly

C. To improve computer speed

D. To update antivirus software

Solution

1. Step 1: Understand social engineering basics

   Social engineering targets human behavior, not computer systems.

2. Step 2: Identify the goal of social engineering

   The goal is to trick people into revealing private or sensitive information.

3. Final Answer:

   To trick people into giving private information -> Option A

4. Quick Check:

   Social engineering = trick people [OK]

Hint: Social engineering targets people, not machines [OK]

Common Mistakes:

• Thinking it hacks software directly
• Confusing with computer viruses
• Assuming it improves hardware

2. Which of the following is a safe practice when receiving an unexpected email asking for your password?

easy

A. Verify the sender's identity before responding

B. Click the link in the email to update your password

C. Reply with your password immediately

D. Forward the email to all your contacts

Solution

1. Step 1: Analyze email safety steps

   Never share passwords or click links without verifying the sender.

2. Step 2: Choose the safest action

   Verifying the sender's identity helps avoid falling for scams.

3. Final Answer:

   Verify the sender's identity before responding -> Option A

4. Quick Check:

   Verify sender before sharing info [OK]

Hint: Always verify who asks before sharing info [OK]

Common Mistakes:

• Sharing passwords without checking
• Clicking suspicious links
• Forwarding suspicious emails

3. You receive a phone call from someone claiming to be from your bank asking for your account number. What should you do?

medium

A. Give the account number immediately to avoid problems

B. Ask the caller to send an email instead

C. Share your account number only if the caller sounds polite

D. Hang up and call the bank using the official number

Solution

1. Step 1: Identify safe response to suspicious calls

   Never share sensitive info over unexpected calls without verification.

2. Step 2: Verify caller by contacting bank directly

   Calling the bank using official contact ensures legitimacy.

3. Final Answer:

   Hang up and call the bank using the official number -> Option D

4. Quick Check:

   Verify caller by official contact [OK]

Hint: Always verify caller by official number [OK]

Common Mistakes:

• Sharing info immediately
• Trusting caller tone
• Asking for email instead (may delay but not verify)

4. Identify the mistake in this scenario: A user receives an email asking to reset their password and clicks the link without checking the sender's email address.

medium

A. The user correctly reset the password

B. The user should have checked the sender's email address first

C. The user should have replied to the email

D. The user should have forwarded the email to IT support

Solution

1. Step 1: Analyze the user's action

   Clicking links without verifying sender can lead to phishing attacks.

2. Step 2: Identify the correct safe practice

   Checking the sender's email address helps confirm if the email is legitimate.

3. Final Answer:

   The user should have checked the sender's email address first -> Option B

4. Quick Check:

   Verify sender before clicking links [OK]

Hint: Check sender email before clicking links [OK]

Common Mistakes:

• Assuming all password reset emails are safe
• Replying to suspicious emails
• Forwarding without verifying

5. A company wants to train employees to avoid social engineering attacks. Which combination of actions is best to include in the training?

hard

A. Share passwords only with managers and never change them

B. Ignore all emails and calls from unknown sources

C. Verify identity before sharing info and report suspicious messages

D. Click links quickly to avoid delays and trust polite callers

Solution

1. Step 1: Evaluate safe practices for social engineering prevention

   Ignoring all unknown contacts is impractical; sharing passwords or clicking links quickly is unsafe.

2. Step 2: Identify best training actions

   Verifying identity before sharing info and reporting suspicious messages helps prevent attacks effectively.

3. Final Answer:

   Verify identity before sharing info and report suspicious messages -> Option C

4. Quick Check:

   Verify and report suspicious = safe training [OK]

Hint: Verify identity and report suspicious contacts [OK]

Common Mistakes:

• Ignoring all unknown contacts
• Sharing passwords without checks
• Trusting callers based on tone