Chapter 4

Question 1

Smishing

Answer 1

Relies on text messages as part of the phishing scam.

Question 2

Pretexting

Answer 2

The process of using a made-up scenario to justify why you are approaching an individual.

Question 3

Password Spraying Attacks

Answer 3

A form of brute-force attack that attempts to use a single password or small set of passwords against many accounts.

Question 4

Dictionary Attacks

Answer 4

A brute-force method used by attackers to guess passwords by systematically trying a list of commonly used words, phrases, or precompiled wordlists, such as those found in dictionaries.

Definition:
A method to crack passwords by trying a predefined list of words or phrases.

How It Works:
Attackers use software to automate the process of testing wordlist entries against the target system.

Examples of Wordlists:
Common passwords (e.g., “password123,” “qwerty”).
Phrases or variations (e.g., “Iluv3Dogs!”).