Social Engineering Concepts and Techniques EHE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard · select all that apply

   A company has suffered a social engineering attack that resulted in the theft of customer data. Which of the following are potential consequences of this attack? (Select all that apply.)

   • AReputational damage
   • BLegal liability
   • CRegulatory fines
   • DIncreased employee morale
   Check answers Discussion Select an answer first
2. 2application · medium

   An employee receives an email that appears to be from the IT help desk, stating that their mailbox is full and they must click a link to 're-validate' their account within one hour or it will be suspended. The email includes the employee's full name and job title. Which psychological principle is the attacker primarily exploiting?

   • AScarcity, because the mailbox is full.
   • BUrgency, because the email threatens account suspension within one hour.
   • CTrust, because the email includes the employee's name and job title.
   • DAuthority, because the email appears to come from the IT help desk.
   Reveal Solution Discussion Select an answer first
4. 3expert · medium

   A security analyst is investigating a suspected social engineering attack. An employee received an email that appeared to be from the CEO, asking the employee to purchase gift cards and send the codes. The email was sent from a personal email address, but the employee complied because the CEO was traveling and unreachable. Which combination of factors made this attack successful?

   • ASocial proof and trust, because other employees had received similar emails.
   • BAuthority and urgency, because the request came from the CEO and the employee could not verify it.
   • CBaiting and pretexting, because the attacker used a fake CEO identity.
   • DReciprocity and scarcity, because the CEO was offering a reward.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a potential consequence of a successful social engineering attack on an organization?

   • ADecreased regulatory compliance requirements
   • BIncreased network performance
   • CImproved employee awareness of security policies
   • DLoss of customer trust and reputational damage
   Reveal Solution Discussion Select an answer first
6. 5application · easy

   A new security awareness training program is being developed. The goal is to help employees recognize and resist social engineering attacks. Which of the following topics is most directly aligned with the definition of social engineering?

   • AHow to identify phishing emails and verify requests for sensitive information.
   • BHow to install antivirus software on endpoints.
   • CHow to configure firewall rules to block malicious IP addresses.
   • DHow to use encryption to protect data at rest.
   Reveal Solution Discussion Select an answer first