2.7 Describe Social Engineering Attacks (manual and Generative AI) 200-201 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company is implementing a social engineering defense program. They have a high turnover rate and a remote workforce. Which control is most important to maintain effectiveness?

   • APosters and email reminders about social engineering
   • BA one-time onboarding security briefing
   • CRegular phishing simulations with immediate feedback
   • DAnnual security awareness training
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security team is evaluating the risk of generative AI being used to create phishing emails. They want to implement a control that specifically addresses the AI-generated nature of these emails. Which control would be most effective?

   • ADeploy an email gateway that uses AI-based content analysis to detect anomalies.
   • BRequire users to manually inspect all emails for grammatical errors.
   • CBlock all emails from external domains.
   • DDisable HTML rendering in email clients.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A user receives a text message claiming to be from their bank, asking them to click a link to verify their account. Which social engineering technique is being used?

   • APretexting
   • BBaiting
   • CSmishing
   • DVishing
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security analyst reviews a phishing email that appears to come from the CEO. The email is grammatically perfect, references a recent company event, and includes a voice message attachment that sounds like the CEO asking the recipient to purchase gift cards. The analyst suspects generative AI was used. Which observation most strongly supports this suspicion?

   • AThe email is grammatically perfect.
   • BThe email asks for gift cards.
   • CThe email references a recent company event.
   • DThe voice message sounds like the CEO but was likely cloned using AI.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is a deepfake in the context of social engineering?

   • AAn AI-generated video or audio that convincingly impersonates a real person
   • BA phishing email that appears to come from a trusted source
   • CA type of malware that steals personal information
   • DA fake social media profile used to build trust
   Reveal Solution Discussion Select an answer first