Social Engineering Techniques and Countermeasures ECSS Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   In a quid pro quo attack, what does the attacker typically offer in exchange for the victim's information or action?

   • AA false sense of urgency
   • BA free service or benefit
   • CA threat of negative consequences
   • DA promise of anonymity
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A security manager wants to measure the effectiveness of the security awareness training program. Which metric would provide the most meaningful insight into the program's impact?

   • AThe time taken to complete the training module.
   • BThe percentage of employees who report simulated phishing emails to the security team.
   • CThe number of training sessions completed per employee.
   • DThe number of security incidents reported to the help desk.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is the primary difference between phishing and spear phishing?

   • APhishing targets executives, while spear phishing targets regular employees
   • BSpear phishing targets a specific individual or group, while phishing is a mass, untargeted attack
   • CPhishing uses email, while spear phishing uses phone calls
   • DSpear phishing is always more sophisticated than phishing
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A company with a high-security research lab wants to prevent tailgating without impeding employee flow. They currently use a badge reader at the entrance. Which solution best balances security and convenience?

   • AUse a biometric scanner that allows multiple people to enter when one authenticates.
   • BInstall a mantrap with a one-person turnstile that requires badge authentication for each entry.
   • CPost a security guard at the entrance to visually verify each employee.
   • DRequire employees to wear visible ID badges and challenge anyone without one.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which procedural countermeasure is most effective in reducing the success of social engineering attacks that rely on impersonation?

   • AUsing strong passwords
   • BInstalling antivirus software
   • CEncrypting emails
   • DVerification procedures for sensitive requests
   Reveal Solution Discussion Select an answer first