Social engineering

Computing

Cybersecurity

Cybercriminals stealing data through hacking into systems

Humans using methods trick or manipulate other humans into handing over information

Websites deceiving humans into giving away personal data

Which one of the following best describes social engineering?

"An attack that involves an attacker watching the victim while they provide sensitive information" is a description of which of the following?

Which of the following is when attackers create short, fun quizzes in an attempt to find out key pieces of information that can help them answer account security questions?

You receive an email from an unknown sender asking for money. The sender wants you to respond to the email. There are no hyperlinks in the email, but it includes unusual use of English and there are a number of spelling mistakes. What type of social engineering attempt is this?

When data has been processed and is meaningful, which of these has it become?

Is the following data or information:  "Sophie got 38 out of 40 on her English test"

So that they can recommend products to you based on previous products you have purchased or viewed

So that they can sell the information onto cybercriminals without your permission

So that they can sell the information to marketing companies

Why might a company collect information about you to form a profile? (Which two of the following apply?)

To act as a deterrent to cybercriminals who try to steal data on people

To prevent cybercriminals from spreading a virus

To require organisations that store data on people to use it responsibility and keep it safe

What is the purpose of the Data Protection Act?

One of your rights under the Data Protection Act is to have your data deleted. Do you have the right to ask a your school to delete all of the information it stores on you?

Social engineering

Lesson outcome