Social Engineering Concepts and Techniques EHE Practice Questions (Page 4)

Questions 16–20

1. 16expert · medium

   A healthcare organization has experienced a social engineering attack where an attacker posed as a patient and obtained a nurse's login credentials via a phone call. The attacker then accessed patient records and sold the data. The organization is now evaluating security measures. Which control would be most effective in preventing this type of attack?

   • AConduct regular backups of patient records.
   • BImplement a strict policy that requires verification of patient identity before discussing any information over the phone.
   • CDeploy a next-generation firewall to block malicious traffic.
   • DIncrease the password complexity requirements for all employees.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A new security analyst is explaining to a non-technical manager why social engineering is a significant risk. Which statement best describes the role of social engineering in information security?

   • AIt is a method for encrypting data to prevent unauthorized access.
   • BIt exploits human psychology to bypass technical controls and gain unauthorized access.
   • CIt is a type of malware that spreads through email attachments.
   • DIt is a technical vulnerability in network protocols.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard · select all that apply

   A security team is analyzing a recent social engineering attack. The attacker used a fake USB drive labeled 'Employee Salaries' left in the break room. An employee plugged it in, and it installed malware. Which of the following techniques and principles are demonstrated? (Select all that apply.)

   • ATailgating
   • BPretexting
   • CCuriosity
   • DBaiting
   Check answers Discussion Select an answer first
5. 19foundation · easy

   Why is social engineering considered a significant threat to information security?

   • AIt primarily targets hardware weaknesses that are difficult to patch
   • BIt only affects individuals, not organizations
   • CIt bypasses technical controls by exploiting human behavior and decision-making
   • DIt requires advanced programming skills to execute successfully
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An employee receives a text message that appears to be from the company's HR department, asking them to click a link to review a new benefits policy. The link leads to a fake login page. Which social engineering technique is this?

   • AWhaling
   • BSmishing
   • CPharming
   • DVishing
   Reveal Solution Discussion Select an answer first