2.7 Describe Social Engineering Attacks (manual and Generative AI) 200-201 Practice Questions (Page 8)

Questions 36–39

1. 36foundation · easy

   Which indicator is commonly associated with AI-generated phishing emails?

   • AA lack of any personalization
   • BThe email is always sent from a free email service
   • CConsistently perfect grammar and unnatural phrasing
   • DNumerous spelling and punctuation errors
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A security analyst is investigating a suspicious email that contains a voice message attachment. The voice message sounds like the company's CEO, but the analyst suspects it is AI-generated. The analyst has access to a voice analysis tool. Which action would provide the most conclusive evidence?

   • AListen to the voice message carefully for any unnatural pauses.
   • BRun the voice message through the analysis tool and compare it to a known sample of the CEO's voice.
   • CCheck the email's sender address.
   • DAsk the CEO if they sent the message.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A user receives an urgent email from the 'IT Help Desk' stating that their mailbox is over quota and they must click a link to 'verify their account' within 30 minutes or lose email access. The link points to a domain that closely resembles the company's real domain but with a misspelling. Which two indicators most strongly suggest this is a social engineering attempt?

   • AThe email uses a misspelled domain and was sent during business hours.
   • BThe email is from the IT Help Desk and mentions mailbox quota.
   • CThe email asks the user to click a link and verify an account.
   • DThe email creates a false sense of urgency and uses a look-alike domain.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   An attacker conducts extensive reconnaissance on a target organization, learning the names of employees, their roles, and the company's internal project names. The attacker then sends a personalized email to a finance employee, referencing a real project and asking for a payment to a new vendor. Which technique is being used?

   • ABaiting
   • BWhaling
   • CSpear phishing
   • DVishing
   Reveal Solution Discussion Select an answer first