2.7 Describe Social Engineering Attacks (manual and Generative AI) 200-201 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company wants to reduce the risk of vishing attacks targeting its finance team. Which control would be most effective in mitigating this specific threat?

   • ADeploy an email spam filter with advanced threat protection.
   • BConduct annual security awareness training.
   • CEnable multi-factor authentication on all financial systems.
   • DImplement a callback verification protocol for any request involving money transfers.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which verification protocol is recommended to prevent a vishing attack that impersonates a company executive?

   • AImmediately comply to avoid delaying important business
   • BVerify the caller's identity by checking the caller ID
   • CTrust the caller if they know your name and department
   • DCall back the executive using a known, official phone number
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which statement best defines social engineering in the context of cybersecurity?

   • AThe psychological manipulation of people to divulge confidential information or perform actions that compromise security
   • BThe use of technical vulnerabilities to gain unauthorized access to systems
   • CThe automated scanning of networks to identify open ports and services
   • DThe process of encrypting data to prevent unauthorized access during transmission
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team is evaluating a suspicious email that contains a video of the company's CFO making a request. The video appears realistic, but the team suspects it may be a deepfake. Which detection strategy would be most effective in confirming the video's authenticity?

   • ASearch the internet for similar videos of the CFO.
   • BCheck the email's SPF and DKIM records.
   • CVerify the CFO's calendar for the time of the video.
   • DAnalyze the video for unnatural blinking or facial artifacts.
   Reveal Solution Discussion Select an answer first
6. 5expert · medium

   A security team is investigating a series of social engineering attacks. One attack involved a phone call from someone claiming to be a vendor, asking for the company's purchase order details. Another attack involved a USB drive left in the parking lot. Which two techniques were used?

   • APretexting and smishing
   • BPhishing and vishing
   • CVishing and baiting
   • DBaiting and pretexting
   Reveal Solution Discussion Select an answer first