5.2. Recognize How to Avoid Becoming a Victim of Social Engineering Attacks. 100-140 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A help desk technician receives a phone call from someone claiming to be the company's CEO. The caller says they are at an offsite meeting, needs a password reset immediately, and asks the technician to text the new password to a personal number. The technician recognizes the voice as similar to the CEO's but is not certain. Which action best protects the company while still being helpful?

   • AReset the password and text it to the number provided, since the caller sounds like the CEO and the request is urgent.
   • BAsk for the CEO's employee ID and then reset the password, sending it only to the corporate email on file.
   • CPolitely decline the request and hang up, then report the call to the security team as a suspected social engineering attempt.
   • DTell the caller you will verify the request by calling back on the CEO's number listed in the corporate directory before making any changes.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is implementing a new security awareness program. The IT manager wants to reduce the risk of phishing and vishing attacks. The manager must choose a training approach that is effective but also minimizes disruption to employees' work. Which approach best balances these goals?

   • ASend a monthly email newsletter with tips on recognizing phishing and vishing.
   • BRequire all employees to complete a two-hour online course on social engineering once.
   • CImplement a simulated phishing campaign with immediate, brief feedback for employees who click, combined with short quarterly training modules.
   • DConduct an annual mandatory training session for all employees.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A user receives a pop-up on their computer warning that their system is infected and to call a toll-free number for 'immediate support.' The user calls the number and the technician asks for remote access to 'remove the virus.' What should the user do?

   • ACall the number back to get more information about the virus.
   • BHang up, do not call the number, and report the pop-up to the IT help desk.
   • CAllow remote access because the pop-up is from the operating system.
   • DDisconnect from the internet and run a full antivirus scan.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A help desk technician receives a call from someone claiming to be a remote employee who needs a password reset. The caller provides the correct employee ID and answers the security questions correctly. However, the technician notices that the caller's voice sounds different from usual, and the caller is in a hurry. The technician also sees that the employee is currently logged into the VPN from a known location. What should the technician do?

   • AReset the password because all verification checks passed.
   • BReset the password but note the voice difference in the ticket.
   • CAsk for a second form of verification, such as a manager approval.
   • DRefuse the reset and tell the caller to come in person.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An attacker calls the help desk, pretends to be a remote employee, and asks for a password reset. Why is this type of attack often successful?

   • AHelp desk staff are required to reset passwords for all employees who call.
   • BHelp desk staff have the authority to reset passwords, and the caller may sound convincing.
   • CHelp desk staff cannot refuse requests from anyone who claims to be a manager.
   • DHelp desk staff are trained to reset passwords for any caller who sounds urgent.
   Reveal Solution Discussion Select an answer first