Reading...
Play button
Play button
Use LEFT and RIGHT arrow keys to navigate between flashcards;
Use UP and DOWN arrow keys to flip the card;
H to show hint;
A reads text to speech;
13 Cards in this Set
- Front
- Back
|
What is:
Shoulder Surfing |
A form of social engineering, it involves watching someone "over their
shoulder" when they enter sensitive data. |
|
|
What is:
Dumpster Diving |
A common physical access method , it involves looking for sensitive material
that was thrown out. |
|
|
What is:
Tailgating |
A favorite method of gaining entry to a locked area by following someone through
the door they just unlocked. |
|
|
What is:
Impersonation |
A method of social engineering that involves any act of pretending to be
someone you are not. |
|
|
What are:
Hoaxes |
A phony threat, a humorous or malicious deception.
|
|
|
What is:
Whaling |
A type of social engineering that is no more than phishing or spear phishing for big
users. |
|
|
What are:
The 7 Principles Behind Social Engineering |
Authority
Intimidation Consensus/Social Proof Scarcity Urgency Familiarity/Liking Trust |
|
|
What is a:
Deterrent Control |
Anything intended to warn a would–be attacker that they should not attack.
This could be a posted warning notice, locks on doors, barricades, lighting, or anything that can delay or discourage an attack. |
|
|
What is a:
Preventive Control |
A control that stops something from happening such as locked doors, user
training on potential harm, or even biometric devices and guards that can deny access. |
|
|
What is
a: Detective Control |
A control that is used to uncover a violation such as an alarm, a file
checksum, or antivirus. |
|
|
What is a:
Compensating Control |
Backup controls that come into play only when other controls have
failed such as an alarm that sounds when a door is jimmied or a backup generator. |
|
|
What is a:
Technical Control |
Controls that are implemented through technology, such as IDS, IPS,
firewalls, etc. |
|
|
What is a:
Administrative Control |
A control that comes down through policies, procedures, and guidelines
such as an escalation procedure to be used in the event of a break–in (who to notify first, etc). |
