2.7 Describe Social Engineering Attacks (manual and Generative AI) 200-201 Practice Questions (Page 7)

Questions 31–35

1. 31expert · medium

   A security awareness trainer is explaining why a recent phishing email was so convincing. The email used the recipient's name, job title, and a recent project detail, and it appeared to come from a senior executive. Which psychological principles did the attacker most effectively exploit?

   • ASocial proof and liking
   • BAuthority and trust
   • CUrgency and scarcity
   • DReciprocity and commitment
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which action is an example of direct interaction in a manual social engineering attack?

   • AScanning the target's public social media profiles
   • BCalling the target and impersonating a vendor
   • CMonitoring the target's social media activity
   • DSearching public records for the target's address
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security analyst notices a phishing email that is perfectly formatted, uses the company's official logo, and addresses the recipient by name. The email asks the user to verify their account by clicking a link. Which action should the analyst take to determine if the email was AI-generated?

   • AScan the attachment with antivirus software
   • BCheck the email headers for the originating IP address
   • CLook for unusual phrasing or lack of specific internal references
   • DVerify the sender's domain with a DNS lookup
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security analyst notices an increase in highly personalized phishing emails that include the recipient's job title, recent projects, and a voice note that sounds like their manager. The emails are grammatically flawless and arrive at optimal times. Which advancement in social engineering is most likely enabling these attacks?

   • ABetter social media data mining
   • BGenerative AI creating realistic content and voice clones
   • CMore sophisticated phishing kits
   • DImproved email deliverability techniques
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company is concerned about deepfake audio being used to impersonate executives in phone calls. Which detection strategy would be most effective in identifying a deepfake voice?

   • ACheck the caller ID against a directory.
   • BUse audio forensics tools to analyze spectral patterns for artifacts.
   • CRequire callers to provide a callback number.
   • DListen for background noise in the call.
   Reveal Solution Discussion Select an answer first