An attacker calls an employee, pretends to be a customer, and offers a free gift card if the employee provides their work email address and phone number. The employee provides the information. Which social engineering technique is this, and what control would be most effective?

Quid pro quo; provide security awareness training on not disclosing personal information

Pretexting; implement caller ID verification

Phishing; enforce MFA for all systems

Baiting; deploy an email filter to block phishing emails

What is the first step an employee should take when they suspect they have received a phishing email?

Reply to the sender to ask for more information

Forward it to all colleagues to warn them

Click the link to see where it leads

A company is experiencing phishing emails that contain malicious attachments. The emails are not being caught by the current email filter. Which control would be most effective in preventing malware infection?

Enforcing MFA for all email access

Blocking all attachments with executable extensions

Sandboxing attachments in a secure environment before delivery

Requiring users to scan attachments with antivirus before opening

An attacker leaves USB drives in the company parking lot. When an employee plugs one in, it installs malware that gives the attacker remote access. Which social engineering technique is this, and what control would be most effective?

Baiting; implement endpoint protection that blocks autorun and scans USB devices

Phishing; implement email filtering to block malicious attachments

Pretexting; enforce a clean desk policy

Quid pro quo; require users to report lost USB drives

A company has been receiving phishing emails that pass the email filter because the messages are sent from a legitimate but compromised domain. The emails contain links to credential-harvesting pages. Which combination of controls would most effectively reduce the risk?

User training to identify phishing and incident reporting procedures

Web filtering to block known malicious URLs and MFA to protect against credential theft

Disable HTML email and require out-of-band verification for all logins

Email filtering with SPF/DKIM/DMARC and anti-malware on endpoints

CiscoCertified Network Professional Security

Domain 1Objective 4

1.4 Describe the Controls Used to Protect Against Phishing and Social Engineering Attacks 350-701 Practice Questions (Page 3)

Part of the Security Concepts domain, which accounts for 20% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

20%of the exam

Questions 11–15

11application · medium
An attacker calls an employee, pretends to be a customer, and offers a free gift card if the employee provides their work email address and phone number. The employee provides the information. Which social engineering technique is this, and what control would be most effective?
Select an answer first
12foundation · easy
What is the first step an employee should take when they suspect they have received a phishing email?
Select an answer first
13application · medium
A company is experiencing phishing emails that contain malicious attachments. The emails are not being caught by the current email filter. Which control would be most effective in preventing malware infection?
Select an answer first
14application · medium
An attacker leaves USB drives in the company parking lot. When an employee plugs one in, it installs malware that gives the attacker remote access. Which social engineering technique is this, and what control would be most effective?
Select an answer first
15application · medium
A company has been receiving phishing emails that pass the email filter because the messages are sent from a legitimate but compromised domain. The emails contain links to credential-harvesting pages. Which combination of controls would most effectively reduce the risk?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.