Social Engineering Techniques and Countermeasures ECSS Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   An attacker leaves USB drives in the company parking lot. An employee plugs one into their workstation, and malware installs. Which attack vector was used, and what is the most effective countermeasure?

   • AQuid pro quo; implement email filtering
   • BPretexting; enforce a clean desk policy
   • CPhishing; conduct security awareness training
   • DBaiting; disable USB ports via group policy
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   An attacker waits near a secure entrance and follows an employee through the door as it opens. The employee does not notice the attacker. This is an example of which physical social engineering technique?

   • APiggybacking
   • BShoulder surfing
   • CDumpster diving
   • DTailgating
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   An attacker leaves a CD labeled 'Employee Bonus Schedule' in the break room. An employee inserts it into their computer, and malware spreads. Which attack vector is this, and what is the best countermeasure?

   • ABaiting; disable optical drives via group policy
   • BQuid pro quo; implement email filtering
   • CPretexting; enforce a clean desk policy
   • DPhishing; conduct security awareness training
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   An attacker calls an employee, claiming to be from the IT help desk, and states that there is a critical security issue that requires the employee's password to be reset immediately. The attacker asks for the current password to verify identity. Which social engineering principle is being exploited, and what should the employee do?

   • AScarcity; the employee should provide the password to avoid a security breach.
   • BSocial proof; the employee should verify the caller's identity by calling the number on the company directory.
   • CLiking; the employee should comply because the caller seems friendly.
   • DAuthority and urgency; the employee should hang up and report the call to the security team.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A company has a mix of remote and on-site employees. The security team wants to implement a social engineering defense program. Which approach is most comprehensive?

   • AConduct a one-time security awareness seminar for all employees.
   • BCombine regular security awareness training, simulated phishing tests, and a clear incident reporting procedure.
   • CImplement a strict password policy with complex passwords and frequent changes.
   • DDeploy an advanced email filtering solution that blocks all phishing emails.
   Reveal Solution Discussion Select an answer first