2.7 Describe Social Engineering Attacks (manual and Generative AI) 200-201 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security analyst reviews a phishing email that contains a professional logo, perfect grammar, and a personalized greeting with the recipient's job title. The email asks the user to click a link to update a password. Which indicator most strongly suggests the email was generated by AI?

   • AThe email includes the recipient's correct job title
   • BThe email has no spelling or grammar errors
   • CThe email was sent from a free webmail domain
   • DThe email's language is unusually generic and lacks specific project references
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An attacker calls a company's front desk, claims to be a senior executive's assistant, and says the executive needs the new employee's personal phone number immediately for an 'urgent client matter.' The front desk employee, wanting to be helpful, provides the number. Which social engineering technique did the attacker primarily use?

   • ASmishing
   • BBaiting
   • CPhishing
   • DPretexting
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company is considering implementing a new policy to reduce the risk of CEO fraud via email. The policy must balance security with operational efficiency. Which policy would be most effective without causing excessive friction?

   • ABlock all emails from external domains that impersonate executives.
   • BDisable email forwarding to external addresses.
   • CRequire all employees to use PGP encryption for email.
   • DRequire a second-person approval for any wire transfer over a certain amount.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How does generative AI enhance phishing attacks compared to traditional phishing?

   • AIt can create highly personalized and grammatically correct emails at scale
   • BIt eliminates the need for any human interaction
   • CIt only works on email, not other communication channels
   • DIt guarantees the email will bypass all security filters
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which defensive measure is most effective in reducing the success of social engineering attacks?

   • AImplementing a firewall at the network perimeter
   • BEnforcing strong password policies
   • CRegularly updating antivirus software
   • DConducting security awareness training for employees
   Reveal Solution Discussion Select an answer first