Social Engineering Techniques and Countermeasures ECSS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a technical countermeasure that can help mitigate the impact of social engineering attacks that compromise credentials?

   • AStrong password policy
   • BSecurity awareness training
   • CMulti-factor authentication (MFA)
   • DIncident reporting procedures
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   An attacker leaves a USB drive labeled 'Confidential' in a company parking lot. An employee picks it up and plugs it into their computer to see what's on it. Which social engineering attack is this?

   • ATailgating
   • BQuid pro quo
   • CBaiting
   • DPretexting
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An attacker calls the help desk, claiming to be a new employee who has forgotten their password. The attacker provides the employee's name, department, and manager's name, which were obtained from social media. The help desk agent resets the password without further verification. What is the most effective way to prevent this type of attack?

   • ATrain help desk agents to ask for the employee's birth date and social security number.
   • BAllow password resets only in person at the IT department.
   • CImplement a verification process that requires the caller to provide a one-time passcode sent to a registered mobile device.
   • DRequire the caller to send an email from their corporate email address.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company has experienced a rise in social engineering attacks, including phishing, pretexting, and tailgating. Management wants to implement a comprehensive countermeasure strategy. Which combination of controls is most effective?

   • ADisable USB ports, implement a mantrap, and enforce visitor sign-in
   • BSecurity awareness training, multi-factor authentication, and physical access controls
   • CConduct background checks, enforce non-disclosure agreements, and implement a clean desk policy
   • DEmail filtering, password policy, and clean desk policy
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An employee holds the door for a person carrying several heavy boxes, who then enters the secured office area without badging in. Later, the employee realizes the person was not an employee. Which social engineering technique was used, and what countermeasure would best prevent this?

   • ABaiting; implement a clean desk policy.
   • BTailgating; install a mantraps with access control turnstiles.
   • CPiggybacking; require employees to wear visible ID badges at all times.
   • DPretexting; enforce a strict visitor sign-in procedure.
   Reveal Solution Discussion Select an answer first