Social Engineering Concepts and Techniques EHE Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A security analyst is reviewing an incident where an attacker called the help desk, claimed to be a remote employee, and requested a password reset. The attacker had previously gathered the employee's name, department, and manager's name from the company's intranet. Which phase of the social engineering attack cycle is most critical for the success of this attack?

   • AExecution
   • BImpact
   • CDelivery
   • DResearch
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A medium-sized company has experienced multiple social engineering incidents: a phishing email led to a ransomware infection, a pretexting call resulted in a wire transfer to a fraudulent account, and a tailgating incident allowed an unauthorized person into a server room. The company has limited budget and must choose ONE control to implement that will reduce the risk of all three types of incidents. Which control is most effective?

   • AImplement multi-factor authentication (MFA) for all systems
   • BInstall biometric access controls on the server room
   • CImplement a comprehensive security awareness training program
   • DDeploy an email filtering solution
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A penetration tester is planning a social engineering engagement. The client wants to test both email and phone-based attacks. The tester has limited time and must choose between two scenarios: (1) a phishing email with a malicious attachment, or (2) a vishing call to the help desk requesting a password reset. The client's goal is to assess the effectiveness of their security awareness training. Which scenario is more likely to succeed, and why?

   • APhishing, because employees are more suspicious of phone calls
   • BPhishing, because it can reach a larger audience with less effort
   • CVishing, because it allows for real-time interaction and adaptation to the target's responses
   • DBoth are equally likely to succeed because they exploit the same principles
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A penetration tester is conducting a social engineering assessment. The tester sends an email to employees stating that their accounts will be suspended in 30 minutes unless they verify their password by clicking a link. The email is not personalized and lacks the company logo. Despite this, several employees click the link. Which psychological principle is the tester primarily exploiting?

   • AUrgency
   • BReciprocity
   • CSocial proof
   • DAuthority
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A social engineering attack uses an email that appears to be from the CEO, asking the finance department to urgently wire funds to a new vendor. The email address is slightly misspelled (e.g., ceo@company.com vs ceo@cornpany.com). Which psychological principle is the attacker primarily exploiting, and which technique is being used?

   • AAuthority; phishing
   • BTrust; baiting
   • CUrgency; pretexting
   • DScarcity; vishing
   Reveal Solution Discussion Select an answer first