CompTIA Security+ Study Guide with over 500 Practice Test Questions, 9th Edition

Chapter 4Social Engineering and Password Attacks

THE COMPTIA SECURITY+ EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE:

• Domain 2.0: Threats, Vulnerabilities, and Mitigations
  • 2.2. Explain common threat vectors and attack surfaces.
    • Human vectors/social engineering (Phishing, Vishing, Smishing, Misinformation/disinformation, Impersonation, Business email compromise, Pretexting, Watering hole, Brand impersonation, Typosquatting).
  • 2.4. Given a scenario, analyze indicators of malicious activity.
    • Password attacks (Spraying, Brute force)

Social engineering techniques focus on the human side of information security. Using social engineering techniques, security professionals and attackers can accomplish a variety of tasks ranging ...