A security analyst is investigating a phishing email that bypassed the email gateway. The email contains a link to a URL that uses a URL shortener. The analyst needs to determine the final destination of the URL without exposing the corporate network to risk. Which approach is the safest and most effective?

Access the shortened URL from a sandboxed virtual machine.

Use a threat intelligence platform to check the reputation of the shortened URL and its final destination.

Send the URL to the user to click and see what happens.

Use an online URL expander service to reveal the full URL.

A company has a mature security awareness program with quarterly phishing simulations. However, a recent targeted spear-phishing campaign successfully compromised two executives by using personal details from social media. The security team wants to reduce the risk of future targeted attacks. Which combination of controls would be most effective?

Implement a strict password policy with frequent changes

Disable social media access on company devices

Increase the frequency of phishing simulations to monthly

Implement DMARC, DKIM, and SPF; enforce MFA; and provide targeted training on social media footprint reduction

A company has experienced several successful phishing attacks where employees clicked malicious links. The security team wants to implement a technical control that will help prevent users from reaching known malicious websites, while also providing a safety net if a user clicks a link. Which control should they implement?

Network segmentation and firewall rules

Strong password policy and multi-factor authentication

Security awareness training for all employees

Email gateway with URL filtering and sandboxing

A security analyst is investigating a phishing email that bypassed the email gateway. The email contains a link to 'http://example.com/verify'. The analyst wants to determine if the link is malicious without directly accessing it from the corporate network. Which technique is the safest and most appropriate?

Copy the link into a web browser on a non-privileged workstation.

Send the link to the user to test it from their machine.

Ping the domain to see if it resolves.

Use a sandboxing service or URL reputation lookup tool.

A security manager is designing a security awareness training program. The goal is to reduce the likelihood of employees falling for social engineering attacks. Which training element is most likely to achieve this goal?

Posting monthly security tips on the company intranet

Conducting quarterly simulated phishing campaigns with individualized feedback

Showing a one-time video about the dangers of social engineering

Providing a detailed handbook on all known social engineering techniques

EC-CouncilCertified Ethical Hacker

Domain 4Objective 2

Social Engineering and Phishing CEH Practice Questions (Page 1)

Part of the Network and Perimeter Hacking domain, which makes up ~9% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~9–14 in this domain), expect 2–3 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

6concepts

Questions 1–5

1expert · hard
A security analyst is investigating a phishing email that bypassed the email gateway. The email contains a link to a URL that uses a URL shortener. The analyst needs to determine the final destination of the URL without exposing the corporate network to risk. Which approach is the safest and most effective?
Select an answer first
2expert · hard
A company has a mature security awareness program with quarterly phishing simulations. However, a recent targeted spear-phishing campaign successfully compromised two executives by using personal details from social media. The security team wants to reduce the risk of future targeted attacks. Which combination of controls would be most effective?
Select an answer first
3application · medium
A company has experienced several successful phishing attacks where employees clicked malicious links. The security team wants to implement a technical control that will help prevent users from reaching known malicious websites, while also providing a safety net if a user clicks a link. Which control should they implement?
Select an answer first
4application · medium
A security analyst is investigating a phishing email that bypassed the email gateway. The email contains a link to 'http://example.com/verify'. The analyst wants to determine if the link is malicious without directly accessing it from the corporate network. Which technique is the safest and most appropriate?
Select an answer first
5application · medium
A security manager is designing a security awareness training program. The goal is to reduce the likelihood of employees falling for social engineering attacks. Which training element is most likely to achieve this goal?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Social Engineering and Phishing CEH Practice Questions (Page 1)

Questions 1–5

A security manager is designing a security awareness training program. The goal is to reduce the likelihood of employees falling for social engineering attacks. Which training element is most likely to achieve this goal?

Keep studying — Network and Perimeter Hacking