Identifying TYPE (Categorical, Conditional or Disjunctive) & VALIDITY (Valid or Invalid)

identifying procedural type text - Starter Quiz

Good day this is Chris today we will be doing a quick walkthrough on ISO 14001 2015 Environmental Management System and its main clauses let's get started ISO 14001 2015 Environmental Management System is a globally recognized standard for environment Management systems or EMS an EMS is a framework that organizations use to manage their environmental impact comply with regulations and improve their environmental performance the standard outlines are requirements for an EMS including the development of an environmental policy the identification of environmental aspects and impacts the establishment of objectives and targets the implementation of operational control monitoring and measurement systems and the ongoing review and Improvement of the system ISO 14001 is a flexible standard that can be used by organizations of any size or type regardless of their environment impact or level of environment performance it provides a practical framework for organizations to manage their environmental impact reduce environment risks and demonstrate their commitment on sustainability to their stakeholders here is the standard that provides a structured approach to develop an EMS which includes several key steps one organizations must develop an environmental policy that outlines their commitment to environmental sustainability this policy should be communicated to all employees and stakeholders two organizations must identify their environmental aspects and impacts this involves identifying the activities products and services that have an impact on the environment as well as the potential environmental consequences of those impacts three once the environmental aspects and the impacts have been identified organizations must establish environmental objectives and targets these objectives and targets should be specific measurable achievable relevant and time-bound 4. after setting objectives and targets organizations must Implement operational controls and establish monitoring and measurement systems to ensure that they are meeting their objectives and targets finally organizations must review and continually improve their EMS this involves conducting regular audits reviewing the EMS to ensure that it remains relevant and effective and making any necessary changes or improvements the main Clause of iso 14001 2015 apart from its scope normative references and terms and conditions that the main Clauses of iso 14001 2015 can be listed as context of the organization leadership planning support operation performance evaluation and Improvement Clause 4.0 context of the organization is about understanding the organization and its context understanding the needs and expectations of the interested parties determining the scope of the Environmental Management System EMS and Environmental Management System itself Clause 5.0 talks about leadership and commitment Environmental Policy organizational roles responsibility and authorities Clause 6.0 planning focuses on actions to address risk and opportunities as well as environmental objectives and planning to achieve them Clause 7.0 support are detailed requirements on resources competence awareness communication that includes external and internal communication documented information that involves creating updating in control of documented information Clause 8.0 operation talks about operational planning and control as well as emergency preparedness and response overall the design of iso 14001 2015 provides guidelines to form a system that is structured to cater the requirements of stakeholder needs and expectations to drive life cycle perspective and Energy Efficiency as pictured here Clause 9.0 performance evaluation provides guidelines to monitoring measurement analysis and evaluation evaluation compliance and management review an additional note here is that ISO 19011 2018 guidelines for auditing Management Systems which is an audit process that will determine the scope to establish the audit criteria by collecting evidence evaluating the evidence and then draw a conclusion based on the findings as pictured here [Music] finally Clause 10.0 Improvement talks about how Improvement is an integral factor to an effective Environmental Management system through General non-conformity and corrective action and continual Improvement talking about Improvement it is always continual in putting efforts towards the betterment of the existing system here is a snapshot of the main Clauses of iso 14001 2015 [Music] I hope you find this video useful we are industry experts specialized in management system consultancy and Industry relevant corporate training give us a call and let us help you drive your business excellence and upskill your employees to elevate workplace efficiency [Music] CREATE 10 MCQ AND 2 SAQ QUESTIONS BASED ON THE ABOVE PARAGRAPH

SPANISH STUDENTS 10/22/25 In the sentence 'The author chose to juxtapose the wealthy neighborhood with the impoverished area to highlight social inequality,' what does 'juxtapose' most likely mean based on context clues? * 1 point to separate completely to describe in detail to criticize harshly to place side by side for comparison When reading 'This paradox confused everyone: the more he tried to save time, the less time he seemed to have,' what can you infer about a paradox? * 1 point a mathematical equation a simple solution a type of poem a contradictory statement that reveals truth The passage states: 'The author's use of symbolism was evident when the broken mirror represented the character's shattered dreams.' Based on this context, symbolism involves: * 1 point using objects to represent deeper meanings creating rhyming patterns writing in chronological order using literal descriptions only In the text 'Please elaborate on your answer by providing specific examples and detailed explanations,' the word 'elaborate' suggests the need to: * 1 point use simpler words change the topic add more detail make it shorter The critic wrote: 'The actor's performance captured every nuance of emotion, from subtle sadness to barely contained rage.' What does 'nuance' refer to in this context? * 1 point subtle variations in meaning simple emotions loud expressions obvious differences When the text says 'The implication of her silence was clear to everyone in the room, though she never spoke a word,' what does 'implication' mean? * 1 point a command given a direct statement a question asked a conclusion drawn indirectly The scientist stated: 'Based on our limited observations, our hypothesis suggests that plants grow faster with classical music.' What is a hypothesis? * 1 point a type of experiment a proven fact a final conclusion a possible explanation needing more evidence In 'Three witnesses were able to corroborate the defendant's alibi, strengthening his case significantly,' the word 'corroborate' most likely means: * 1 point to question or doubt to confirm or support to change the story to ignore completely The passage reads: 'The student needed to justify her controversial thesis with solid evidence and logical reasoning.' What does 'justify' mean here? * 1 point to make it longer to make excuses for to avoid explaining to prove something is reasonable When the text states 'The researcher was able to synthesize information from five different studies to create a comprehensive theory,' what does 'synthesize' involve? * 1 point copying one source exactly combining multiple sources to create something new rejecting all previous research focusing on only one idea When a reader encounters 'The symbolism in the novel was complex, with the recurring image of doors representing new opportunities throughout the story,' they should: * 1 point memorize all symbols skip symbolic passages look for deeper representational meanings focus only on the literal meaning If a teacher says 'Your essay needs more elaboration - expand on your main points with examples and analysis,' what critical thinking skill is being requested? * 1 point developing ideas with supporting details summarizing briefly using fewer examples changing the topic entirely In the passage 'The dark clouds gathering on the horizon seemed to foreshadow the troubles that would soon befall the village,' what literary technique is being demonstrated? * 1 point The author is using environmental details to hint at future plot developments The author is focusing on realistic weather descriptions The author is using weather to predict actual meteorological events The author is describing a coincidental weather pattern When analyzing 'Sarah knew the antagonist in her favorite novel wasn't just evil—he represented the fear of change that many people experience,' what deeper understanding about antagonists is revealed? * 1 point Antagonists are always completely evil characters Antagonists can represent abstract concepts or human struggles Antagonists must be human characters Antagonists only exist to create action scenes In the sentence 'The protagonist's journey wasn't just about reaching the destination—it was about discovering who she truly was,' what does this suggest about effective protagonists? * 1 point Protagonists must always succeed in their missions Protagonists should remain unchanged throughout the story Protagonists undergo both external and internal development Protagonists should focus only on external goals When the text states 'The word 'home' carried different connotations for each character—warmth and safety for some, confinement and obligation for others,' what critical reading skill is being highlighted? * 1 point Memorizing dictionary definitions Understanding that words have only one correct meaning Identifying grammatical structures Recognizing that word meanings can vary based on personal experience In 'While the denotation of 'snake' is simply a reptile, the author's use of it to describe the character suggests something far more sinister,' what analytical skill is required? * 1 point Understanding reptile biology Memorizing animal classifications Distinguishing between literal and figurative meanings Identifying sentence structure When examining 'The author's tone shifted from hopeful in the opening chapters to increasingly cynical as the story progressed,' what does this reveal about sophisticated writing? * 1 point Tone is unimportant in storytelling Tone changes reflect the author's developing attitude toward the subject Only the ending tone matters Authors should maintain the same tone throughout In analyzing 'The theme of the novel wasn't stated directly but emerged through the characters' repeated struggles with moral choices,' what does this demonstrate about themes? * 1 point Themes develop through patterns in the narrative Themes are only found in the conclusion Themes should always be explicitly stated Themes must be simple moral lessons When the passage reads 'From the character's nervous glances and hesitant speech, readers can infer that she's hiding something important,' what critical thinking process is being described? * 1 point Following explicit plot statements Memorizing character descriptions Making random guesses about character motivations Using textual evidence to draw logical conclusions In 'The ending was deliberately ambiguous, allowing readers to decide whether the character's actions were heroic or selfish,' what does this suggest about sophisticated literature? * 1 point Good stories always have clear, definitive endings Unclear endings indicate poor writing Ambiguity can enhance reader engagement and interpretation Authors should avoid confusing readers When analyzing 'The controversial decision to ban the book sparked debates about censorship versus protecting young readers,' what critical thinking skill is most important? * 1 point Choosing one side immediately Examining multiple perspectives before forming an opinion Avoiding difficult topics entirely Following popular opinion In 'Each character's perspective on the same event revealed how personal experiences shape our understanding of truth,' what deeper concept is being explored? * 1 point All perspectives are equally valid Perspective is unimportant in understanding events There is only one correct way to view any situation Personal background influences how we interpret events When the text states 'The community proved resilient, rebuilding not just their homes but their hope after the disaster,' what does this reveal about the concept of resilience? * 1 point Resilience encompasses both practical and emotional recovery Resilience is an innate trait that cannot be developed Resilience means avoiding all difficulties Resilience only involves physical recovery In analyzing 'The author's portrayal of the character's empathy—her ability to understand her enemy's pain even while fighting him—added complexity to the conflict,' what does this suggest about empathy? * 1 point Empathy means agreeing with everyone Empathy makes people weak in conflicts Empathy should be avoided in difficult situations Empathy can coexist with opposition and create moral complexity When examining 'The character's integrity was tested when telling the truth would hurt people she loved,' what does this reveal about integrity? * 1 point Integrity means always following rules regardless of consequences Integrity means never causing any harm to others Integrity is only important in public situations Integrity involves making difficult moral choices even when costly In 'The student learned to advocate for her ideas by presenting evidence rather than just stating opinions,' what critical skill is being developed? * 1 point Supporting positions with logical reasoning and evidence Avoiding controversial topics entirely Learning to argue loudly and persistently Always agreeing with authority figures If you rewrote a scene from 'The Birchbark House' from Omakayas's grandmother's first-person perspective instead of Omakayas's, how would this most likely change the reader's understanding? * 1 point Nothing would change since they're both female characters The language would become more formal and difficult The story would become less interesting because adults are boring Readers would gain wisdom from experience but lose the innocence of childhood discovery In a plot diagram, the rising action serves which critical purpose beyond simply building toward the climax? * 1 point To provide background information about the setting To confuse readers so the ending is surprising To develop character relationships and establish stakes that make the climax meaningful To make the story longer and more detailed When analyzing the falling action in 'The Birchbark House,' which element would be most important to consider when writing an alternate version? * 1 point Whether the consequences of the climax align with the new direction you want the story to take Making sure it's shorter than the rising action Including a moral lesson for readers How quickly the conflicts get resolved In the exposition of a story, conflict serves which essential function that many readers don't realize? * 1 point To immediately grab attention with action scenes To provide comic relief before serious events To show off the author's writing skills To establish what the characters characterization/personality, which determines what they' must learn to overcome as they face more problems

Instructions: Please answer the following questions to test your understanding of aptitudes and interests. 1. What are Core Drivers (Talents) in the context of aptitudes and interests? a) Abilities that are developed through education b) Natural gifts that predict job effectiveness and contentment c) Interests that change over time d) Personality traits 2. Determine how effective and satisfied you'll be doing a particular kind of work. a) Visual Comparison Speed b) Numerical Reasoning c) Spatial Visualization d) Sequential Reasoning 3. Which Core Driver is associated with the knack for organizing things in a sequential and systematic manner? a) Visual Comparison Speed b) Numerical Reasoning c) Spatial Visualization d) Sequential Reasoning 4. What is the primary role of Space Planners in careers? a) They are responsible for interior design b) They read maps and blueprints c) They generate creative ideas d) They manage financial accounts 5. Which Core Driver relates to the ability to mentally translate two-dimensional images into three-dimensions? a) Visual Comparison Speed b) Numerical Reasoning c) Spatial Visualization d) Sequential Reasoning 6. What type of individuals are known as 3D Visualizers? a) Those who excel in visual art b) People who can quickly process numerical data c) Individuals who can mentally create 3D models from 2D representations d) Creative writers 7. How do Brainstormers differ from Concentrated & Focused individuals in terms of generating ideas? a) Brainstormers generate more ideas b) Concentrated & Focused individuals generate more ideas c) They generate ideas at the same rate d) Both groups struggle to generate ideas 8. What is the primary advantage of having high Visual Comparison Speed? a) It helps in artistic endeavors b) It is useful in complex mathematical problems c) It aids in tasks requiring clerical detail and accuracy d) It enhances spatial visualization 9. Which career is NOT associated with the Core Driver: Visual Comparison Speed? a) Fire Inspector b) Astronomer c) Creative Writer d) Orthoptist 10. What is the main focus of Numerical Reasoning? a) Identifying numerical patterns and trends b) Analyzing historical data c) Solving abstract problems d) Communicating effectively 11. Which Core Driver involves the ability to rapidly draw conclusions from seemingly unrelated pieces of information? a) Numerical Reasoning b) Idea Generation c) Spatial Visualization d) Inductive Reasoning 12. What is the primary characteristic of Diagnostic Problem Solvers? a) They follow a logical step-by-step method of problem-solving b) They rely on specific information and observed experience c) They intuitively leap to conclusions based on limited information d) They are meticulous and deliberate in decision-making 13. What is the role of Fact Checkers in the problem-solving process? a) They intuitively provide solutions b) They rely on specific information and observed experience c) They enjoy acquiring new information and learning d) They make conclusions based on limited facts 14. In what type of role are Abstract Thinkers most comfortable? a) Counseling b) Law c) Marketing d) Construction 15. How can understanding your Core Drivers benefit collaborative work? a) It allows individuals with similar aptitudes to work together more effectively b) It creates conflicts within the team c) It doesn't affect collaborative work d) It makes collaboration more challenging 16. Which Core Driver is associated with processing complex mathematical problems logically? a) Visual Comparison Speed b) Numerical Reasoning c) Sequential Reasoning d) Idea Generation 17. What are Collaborative Planners more likely to do in a team project? a) Lead the team b) Create individual pieces of a project c) Solve abstract problems d) Generate creative ideas 18. How can understanding your aptitudes and interests help you make informed career choices? a) It guarantees job satisfaction b) It allows you to align your career with your strengths c) It helps you choose any career at random d) It has no impact on career decisions 19. Which Core Driver affects whether your thoughts go in several directions at once or follow single ideas more readily? a) Visual Comparison Speed b) Numerical Reasoning c) Idea Generation d) Inductive Reasoning 20. What is the primary characteristic of Idea Contributors? a) They generate creative ideas b) They discuss the big picture and next steps c) They are highly focused and detailed d) They follow a logical step-by-step approach 21. What is the role of Space Planners in the problem-solving process? a) They intuitively provide solutions b) They rely on specific information and observed experience c) They quickly organize information d) They create abstract plans 22. Which Core Driver is linked to the ability to see relationships in seemingly unrelated pieces of information? a) Spatial Visualization b) Inductive Reasoning c) Idea Generation d) Visual Comparison Speed 23. Which career is NOT associated with the Core Driver: Numerical Reasoning? a) Statistician b) Survey Researcher c) Chef d) Actuary 24. What are Core Drivers, and why are they important in the context of aptitudes and interests? a) They are educational qualifications b) They are interests that change over time c) They are natural gifts that predict job effectiveness and contentment d) They are personality traits 25. How can understanding your Core Drivers benefit collaborative work? a) It allows individuals with similar aptitudes to work together more effectively b) It creates conflicts within the team c) It doesn't affect collaborative work d) It makes collaboration more challenging Answers: b) Natural gifts that predict job effectiveness and contentment a) Visual Comparison Speed d) Sequential Reasoning b) They read maps and blueprints c) Spatial Visualization c) Individuals who can mentally create 3D models from 2D representations a) Brainstormers generate more ideas c) It aids in tasks requiring clerical detail and accuracy c) Creative Writer a) Identifying numerical patterns and trends d) Inductive Reasoning c) They intuitively leap to conclusions based on limited information b) They rely on specific information and observed experience b) Law a) It allows individuals with similar aptitudes to work together more effectively b) Numerical Reasoning b) Create individual pieces of a project b) It allows you to align your career with your strengths c) Idea Generation b) They discuss the big picture and next steps c) They quickly organize information b) Inductive Reasoning c) Chef c) They are natural gifts that predict job effectiveness and contentment a) It allows individuals with similar aptitudes to work together more effectively

I. Introduction: A. Welcome and Purpose of Training Welcome to the ABA Clinic Fire and Evacuation Safety Training. The purpose of this training is to ensure the safety and well-being of everyone in the clinic by preparing staff for effective response to fire emergencies and evacuation situations. B. Importance of Evacuation and Fire Safety Understanding the gravity of evacuation and fire safety is paramount. Compliance with safety standards not only meets regulatory requirements but also safeguards the lives of our clients, staff, and visitors. II. Overview of Fire Safety Standards: A. Explanation of Relevant Fire Safety Codes and Standards Our clinic strictly adheres to [Insert Relevant Fire Safety Codes and Standards], including guidelines from the National Fire Protection Association (NFPA) and local fire authorities. Familiarity with these standards is essential for maintaining a safe environment. B. Importance of Compliance Compliance with fire safety standards is a commitment to the well-being of our community. It sets the foundation for a secure and prepared clinic, ensuring a proactive approach to fire safety. III. Fire Prevention Measures: A. Identifying Fire Hazards in the Clinic Regular inspections, conducted quarterly, will identify potential fire hazards, including faulty wiring, overheating equipment, or improperly stored flammable materials. Staff is encouraged to report any potential hazards immediately. B. Proper Storage of Flammable Materials Flammable materials are stored in designated areas equipped with fire-resistant cabinets and safety measures. These areas are clearly marked, and staff is trained on proper storage procedures. C. Electrical Safety Tips Staff is trained to recognize and report any electrical issues promptly. Furthermore, electrical equipment undergoes regular maintenance checks to prevent electrical fires. D. Smoking Policy Smoking is strictly prohibited within the clinic premises. Designated smoking areas, equipped with fire-resistant receptacles, are provided outside the building, ensuring compliance with safety regulations. IV. Emergency Communication: A. Overview of Communication Systems Our clinic utilizes a robust communication system, including intercoms and a mass notification system, to relay emergency information promptly to all staff members. B. Designation of Emergency Contacts Emergency contact information for all staff members is regularly updated. Designated individuals are responsible for initiating emergency communication and ensuring all staff are informed. C. Internal Communication Protocols Clear internal communication protocols are established, outlining the chain of command and communication channels during emergency situations. Staff members are familiarized with these protocols during onboarding. V. Evacuation Procedures: A. Evacuation Routes Evacuation routes are clearly marked throughout the clinic, indicating the shortest and safest paths to exit points. These routes are reviewed annually and updated as needed. B. Emergency Exits and Assembly Points Staff is familiarized with the location of emergency exits and assembly points during regular drills. These drills, conducted quarterly, ensure that all staff are well-practiced in evacuation procedures. C. Evacuation Drills Evacuation drills are conducted quarterly, simulating various emergency scenarios. These drills include scenarios involving individuals with special needs, ensuring staff are equipped to assist everyone during evacuations. D. Assistance for Individuals with Special Needs Staff members receive specialized training on providing assistance to individuals with special needs during evacuations. This includes utilizing evacuation chairs, providing verbal guidance, and ensuring a calm and supportive approach. VI. Fire Extinguisher Training: A. Types of Fire Extinguishers Staff is trained on the different types of fire extinguishers available in the clinic, including ABC and CO2 extinguishers. Training includes recognizing the appropriate use for each type. B. Proper Use and Handling Hands-on demonstrations are provided to staff, allowing them to practice the proper use and handling of fire extinguishers. Emphasis is placed on safety precautions, including maintaining a safe distance and using the PASS method (Pull, Aim, Squeeze, Sweep). C. Location of Fire Extinguishers in the Clinic A map indicating the locations of all fire extinguishers is prominently displayed throughout the clinic. Staff is familiarized with these locations during training sessions. VII. Emergency Response Team: A. Designation of Emergency Response Team Members An Emergency Response Team is designated, comprising individuals from different departments. Team members receive specialized training and are identified by distinctive vests during emergencies. B. Roles and Responsibilities Clear roles and responsibilities for Emergency Response Team members are outlined in the Emergency Response Plan. This includes responsibilities such as assisting with evacuations, providing first aid, and coordinating with emergency services. C. Training for First Aid and CPR Emergency Response Team members receive regular training in first aid and CPR. Training sessions are conducted semi-annually to ensure team members are proficient in life- saving techniques. VIII. Mock Scenarios: A. Conducting Simulated Fire Drills Simulated fire drills are conducted quarterly, involving all staff members. These drills include various fire scenarios, such as small fires, smoke-filled areas, and evacuations of different areas within the clinic. B. Addressing Various Emergency Scenarios Staff members engage in discussions and practical exercises addressing various emergency scenarios, fostering a proactive mindset. Scenarios include power outages, medical emergencies, and coordination with external emergency services. C. Feedback and Improvement Strategies Feedback from drills is collected and analyzed to identify areas for improvement. Regular meetings are held to discuss feedback and implement necessary changes to enhance emergency response strategies. IX. Documentation and Record-Keeping: A. Importance of Documentation Accurate and detailed documentation of all safety-related activities is maintained, including inspection reports, drill records, and incident reports. This documentation is crucial for compliance and continuous improvement. B. Incident Reporting Procedures Staff is trained on the proper procedures for reporting incidents. Incident reports include details such as the nature of the incident, individuals involved, and actions taken. A designated individual reviews and addresses incident reports promptly. C. Regular Audits and Reviews Regular audits and reviews of safety procedures are conducted annually by an external safety consultant. This ensures that the clinic's safety protocols align with the latest standards and identifies areas for continuous improveme

How is personal data collected? There are several ways that an unauthorised person can try and collect your data. These include: •phishing •smishing •vishing •pharming. Phishing Phishing is when a person sends a legitimate looking email to a user. The email contains a link to a website that also looks legitimate. The user is encouraged to click the link and to input personal data into a form on the website. The email could also simply ask the user to reply to the email with their personal data. The user is tricked into giving their personal data to a source that they believe is legitimate. However, both the email and the linked website are from a fake unauthorised source. The personal data that is input is then collected by an unauthorised person. This person can then use this data for criminal acts, for example, to commit fraud or steal the person's identity. Intimidation has become a common feature of phishing emails, threatening the user that they must click the link and rectify a situation immediately, or there will be a further issue. The aim of a phishing attack is to steal the user's personal data. Figure 5.1: Phishing. A real-life example of phishing PayPal have been the subject of several different phishing emails. Users receive an email that looks as though it has been sent from PayPal, as it has the PayPal branding. The email normally warns of an issue such as unexpected activity on their account, or that some kind of verification of their account is required. The user is then asked to click a link to log into their account and resolve the issue. The link takes them to a webpage that looks like the PayPal login page. If the user inputs their login details into this page, they will not be taken to their account. It is often at this stage that the user may realise that the email and webpage are fake. However, they have already given the unauthorised person their PayPal login details. Figure 5.2: An example of a phishing email claiming to be from PayPal. How to recognise phishing There are several guidelines to be aware of regarding emails to avoid being subjected to phishing. These include: •Don't even open an email that is not from a sender that you recognise or a trusted source. •Legitimate companies will never ask you for your personal data using email. Be immediately suspicious of any email that requests your personal data. •Legitimate companies will normally address you by your name. Be suspicious of any email that addresses you as ‘Dear Member' or ‘Dear Customer'. •Legitimate companies will send an email that uses their domain name. If you hover your mouse over the sender's name, it will show the email address that the email is sent from. If this does not look legitimate, for example, does not contain the correct domain name, then it is probably fake. For example, if the sender's email is user@paypal1.com rather than user@paypal.com, this is from an incorrect domain name. •Legitimate companies are protective of their professional reputation and thoroughly check any communications. They will make sure that all information given is grammatically and correctly spelt. Be suspicious of any email that contains bad grammar or spelling mistakes. •A link in an email from a legitimate company will also normally contain the domain name of the company. You can sometimes hover over the link, or right click and inspect the link, to see the address of the URL that is attached. If the URL does not contain the domain name, or also contains typical errors such as spelling mistakes, then be suspicious of this. PRACTICAL ACTIVITY 5.02 Ask a friend or a member of your family if they have ever received an email that they believed was a phishing email. Ask them how they identified it was phishing. Ask them if they know all of the given guidelines for identifying phishing emails. Smishing Smishing (or SMS phishing) is a variant of phishing that uses SMS text messages to lure the user into providing their personal details. The user is sent an SMS text message that either contains a link to a website, in the same way that phishing does, or it will ask the user to call a telephone number to resolve an urgent issue. The same advice can be followed for smishing as given for phishing. The user must question at all times any links that are sent from an unknown or suspicious user. It is advisable that if a user believes the message may be legitimate, to type in the domain name for the legitimate company website into their web browser, rather than following the link in the message. Users should block any numbers that they believe are suspicious to prevent any further risk of smishing from that number. Figure 5.3: Smishing. Vishing Vishing (or voice phishing) has the same aim as phishing, to obtain a user's personal details. The user receives a telephone call that could either be an automated system or could be a real person. An automated voice could speak to the user and advise them that an issue has occurred, such as there has been suspicious activity regarding their bank account. The user may then be asked to call another number, or just to simply press a digit and be directed to another automated system. This system will ask them to provide their bank account details to resolve the issue. The bank account details have then been obtained by the unauthorised user and can be used to commit a crime against the user. The automated system could be replaced by a real person who will try to do the same thing. They will try to convince the user that there has been an issue with an account they have and to provide the log-in details or PIN for the account to verify who they are so the issue can be resolved. The precaution to take for vishing is that no company will ever call you and ask you to provide any log-in details or PIN details over the telephone. They may ask you to provide other personal information, and if you are in doubt that the person on the other end of the phone is legitimate, it is always advisable to put the phone down and call the company back on a legitimate number that you may already know or can obtain. Figure 5.4: Vishing. Pharming Pharming is when an unauthorised user installs malicious code on a person's hard drive or server. The malicious code is designed to redirect a user to a fake website when they type in the address of a legitimate one. The fake website is designed to look like the legitimate one, to trick the user and make sure they are not aware that their request has been redirected. The user will then enter their personal details into the fake website, believing it is the legitimate one, and the unauthorised person will now have their personal data. A common technique used in pharming is called domain name server (DNS) cache poisoning. This technique exploits vulnerabilities in the DNS and diverts the internet traffic intended for a legitimate server toward a fake one instead. The unauthorised user needs to find a way to install the malicious code on the computer. They often hide the malicious code in an email attachment or link. When the user opens the email attachment or clicks the link, the malicious code is downloaded also. Figure 5.5: Pharming. The aim of a pharming attack is also to steal a user's personal data. A real-life example of pharming In 2007 50 different companies all over the world were subject to a pharming attack, these included PayPal, eBay, Barclays bank and American Express. Over a three-day period, hackers managed to infect over 1000 PCs a day with a malicious pharming code. When users who had been infected visited the websites of the different companies, they were redirected to a legitimate-looking version of the site that was designed to steal their personal data. The original email, containing the malicious code, was set up to look like a shocking news story. Users were encouraged to click a link in the email to find out more information. The code was downloaded when the user clicked the link. This was quite a sophisticated attack that required legitimate looking websites to be set up for a large number of companies. It is not known how much money the hackers were able to retrieve as a result. How to prevent pharming All of the guidelines to avoid being subjected to phishing are also relevant for recognising pharming. There are also several other precautions that can be taken to check for pharming attacks. These include: •Have a firewall installed and operational. A firewall monitors incoming and outgoing traffic from your computer. It checks this traffic against set criteria and will flag and stop any traffic that does not meet the criteria. A firewall could detect and block suspicious traffic, such as a malicious code trying to enter your system. •Have an anti-virus program installed that is designed to detect malicious pharming code. You need to scan your computer on a regular basis to check for any malicious code. It is advisable to set up an automatic scan on a daily basis at a time when your computer will normally be switched on. •Be aware when using public Wi-Fi connections. A hacker could look to directly access your computer and install the malicious code if you are connected to a public Wi-Fi connection. It is often advisable to use a VPN when using public Wi-Fi. This will help shield your internet activity and personal details from a hacker, making it more difficult for them to access your computer. Smishing can also be used as a form of pharming. A user is sent a link, that when they click is designed to download malware onto their mobile device. Therefore, it is advisable to have security software installed on your mobile and also scan it regularly to detect any presence of malware.

Related quizzes

Related quizzes