A company experiences a data breach where an attacker used a phishing email to trick an employee into revealing their credentials. The attacker then accessed the employee's email and forwarded confidential client contracts to an external account. Which of the following is the most significant potential consequence for the organization?

Loss of employee productivity due to time spent resetting passwords.

Reputational damage and potential legal liability from exposure of confidential client data.

Increased spam emails in the employee's inbox.

The employee may receive a warning from the IT department.

An employee receives an email that appears to be from a colleague, asking the employee to review a shared document. The email contains a link to a fake login page. The employee clicks the link because the colleague's name is familiar. Which psychological principle is the attacker exploiting?

Reciprocity, because the colleague may have helped the employee before.

Urgency, because the email asks for a review.

Authority, because the colleague is in a position of power.

Trust, because the email appears to come from a known colleague.

Why do social engineers often build a false sense of trust with their targets before making a request?

To reduce the target's likelihood of questioning the request

To comply with legal requirements for social engineering

To make the target feel obligated to report the incident

To ensure the attack cannot be traced back to the attacker

EC-CouncilEthical Hacking Essentials

Domain 4Objective 1

Social Engineering Concepts and Techniques EHE Practice Questions (Page 9)

Part of the Social Engineering domain, which makes up ~9% of our current practice bank.

44questions here

9free pages

5concepts

Questions 41–44

41application · medium
A company experiences a data breach where an attacker used a phishing email to trick an employee into revealing their credentials. The attacker then accessed the employee's email and forwarded confidential client contracts to an external account. Which of the following is the most significant potential consequence for the organization?
Select an answer first
42application · easy
An employee receives an email that appears to be from a colleague, asking the employee to review a shared document. The email contains a link to a fake login page. The employee clicks the link because the colleague's name is familiar. Which psychological principle is the attacker exploiting?
Select an answer first
43foundation · easy
An attacker poses as a senior executive and sends an urgent email demanding that an employee transfer funds immediately. Which psychological principle is primarily being exploited?
Select an answer first
44foundation · easy
Why do social engineers often build a false sense of trust with their targets before making a request?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Social Engineering Concepts and Techniques EHE Practice Questions (Page 9)

Questions 41–44

An employee receives an email that appears to be from a colleague, asking the employee to review a shared document. The email contains a link to a fake login page. The employee clicks the link because the colleague's name is familiar. Which psychological principle is the attacker exploiting?

An attacker poses as a senior executive and sends an urgent email demanding that an employee transfer funds immediately. Which psychological principle is primarily being exploited?

Why do social engineers often build a false sense of trust with their targets before making a request?

Keep studying — Social Engineering