Home/Networks and people/Module 09
OverviewStart here2 min

Social Engineering

Attacks on people instead of machines.

10 units~72 minBeginner levelDomain 3 of exam

About this module

Social engineering attacks the human, not the machine. It is often easier to trick a person into giving up a password than to break strong encryption — no firewall stops a helpful employee from being fooled. This module teaches the techniques so you can recognize and defend against them, and it is defense-focused by nature: the whole point is to build the "human firewall".

What you will learn

  • What social engineering is and its phases
  • Human-based techniques (tailgating, dumpster diving)
  • Phishing and its types
  • Mobile attacks and insider threats
  • Impersonation and identity theft
  • Countermeasures, detection and training

Module roadmap

01Social Engineering BasicsLesson 1 · ~4 min
02Human-based TechniquesLesson 2 · ~5 min
03Phishing & Its TypesLesson 3 · ~5 min
04Phishing Tools & Mobile AttacksLesson 4 · ~4 min
05Insider ThreatsLesson 5 · ~5 min
06Social Networking & ImpersonationLesson 6 · ~4 min
07Identity TheftLesson 7 · ~4 min
08Social Engineering CountermeasuresLesson 8 · ~4 min
09Lab: Spot the PhishLab · ~30 min
10AssessmentAssessment · ~5 min

How to study: read a lesson → answer its 2 "Check yourself" questions → do the lab → pass the assessment with 80%+. Lessons 1, 2, 3 and 5 are the most tested. The lab is a safe phishing-spotting exercise.