1.4 Describe the Controls Used to Protect Against Phishing and Social Engineering Attacks 350-701 Practice Questions (Page 7)

Questions 31–31

1. 31application · medium

   An attacker calls the help desk, claims to be a new remote employee, and says they forgot their laptop at home. The attacker asks the help desk to reset the password and provide the temporary password over the phone. The help desk agent complies. Which social engineering technique was used, and what control would best prevent this?

   • ABaiting; implement a web filter to block malicious downloads
   • BPretexting; require out-of-band verification via a manager-approved callback
   • CPhishing; enforce MFA for all remote access
   • DQuid pro quo; deploy an email filter to block phishing emails
   Reveal Solution Discussion Select an answer first