Social Engineering Techniques and Countermeasures ECSS Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   Why is it important for security awareness training to be conducted regularly rather than only once?

   • ABecause social engineering tactics evolve and employees need to stay updated on new threats
   • BBecause regulations require annual training
   • CBecause it reduces the need for technical controls
   • DBecause employees forget everything after a single session
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   An employee receives a suspicious email with an attachment that they did not request. They do not open it. What should the employee do first according to incident reporting procedures?

   • AReply to the sender to ask if the email is legitimate
   • BReport the email to the security team using the designated reporting procedure
   • CForward the email to the security team for analysis
   • DDelete the email immediately
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A receptionist finds a USB drive labeled 'Employee Bonuses 2024' in the parking lot and plugs it into a work computer to see the contents. What type of social engineering attack is this, and what countermeasure would be most effective?

   • APretexting; disable USB ports on all workstations via group policy.
   • BBaiting; implement a policy that all found USB drives must be turned in to IT for secure disposal.
   • CTailgating; conduct security awareness training on safe handling of removable media.
   • DQuid pro quo; provide antivirus software that scans USB drives automatically.
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   An attacker calls an employee, claiming to be from the company's security department, and asks the employee to verify their username and password to 'confirm their identity' after a recent breach. Which social engineering principle is being exploited, and what is the best response?

   • AHelpfulness; the employee should comply to help the security team.
   • BAuthority and fear; the employee should hang up and report the call to the actual security team.
   • CUrgency; the employee should provide the information to avoid account suspension.
   • DTrust; the employee should ask for the caller's employee ID number.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   Which of the following best describes the typical lifecycle of a social engineering attack?

   • AResearch, hook, play, exit
   • BReconnaissance, weaponization, delivery, exploitation, installation, command and control, actions on objectives
   • CScanning, enumeration, exploitation, post-exploitation
   • DPlanning, execution, persistence, cleanup
   Reveal Solution Discussion Select an answer first