2.7 Describe Social Engineering Attacks (manual and Generative AI) 200-201 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   A security analyst is reviewing a social engineering incident where an attacker posed as a senior executive and demanded an urgent wire transfer. Which psychological principle is the attacker primarily exploiting?

   • AScarcity and reciprocity
   • BSocial proof and liking
   • CAuthority and urgency
   • DCommitment and consistency
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which detection strategy is most effective for identifying AI-generated voice clones in a phone call?

   • AChecking the caller ID for a known number
   • BRequesting a callback to the number shown on the caller ID
   • CAsking a question that the real person would know the answer to
   • DListening for background noise
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A security team is investigating a suspected deepfake video call where an attacker impersonated the CFO to authorize a wire transfer. The video was not recorded, but the attacker used a real-time deepfake filter. The team has a recording of the call's audio. Which approach would be most effective in determining whether the audio was AI-generated?

   • AInterview the employee who received the call.
   • BRun the audio through a deepfake detection tool that analyzes acoustic artifacts.
   • CCompare the audio to the CFO's known voice samples.
   • DCheck the call logs for the originating number.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security team discovers a deepfake video of the CFO instructing employees to transfer funds. Which defense is most effective against this type of attack?

   • AIncrease video surveillance in the office
   • BBlock all video-sharing websites
   • CTrain employees to look for visual glitches in videos
   • DEstablish a verbal code word for financial transactions
   Reveal Solution Discussion Select an answer first
6. 15expert · medium

   A company is designing a security awareness program to address the evolving threat of generative AI in social engineering. Which training topic would be most important to include?

   • AHow to identify AI-generated content, such as deepfakes and voice clones.
   • BHow to configure email spam filters.
   • CHow to create strong passwords.
   • DHow to use social media safely.
   Reveal Solution Discussion Select an answer first