Social Engineering Countermeasures EHE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security team wants to detect social engineering attacks that occur over the phone. They have call detail records (CDRs) that show the number, duration, and time of calls, but not the content. Which monitoring approach is most likely to identify a potential social engineering attack?

   • AMonitor the phone numbers of all employees and flag any calls made after business hours.
   • BMonitor the total call volume for the entire company.
   • CMonitor for patterns such as a single external number calling multiple employees in a short period, or calls to sensitive departments from unknown numbers.
   • DMonitor the duration of all calls and flag any call longer than 30 minutes.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security team wants to detect social engineering attempts that occur through email. Which monitoring activity is most likely to reveal a successful attack?

   • AMonitor the number of emails sent per user per day.
   • BMonitor for unusual login activity, such as logins from new devices or locations, and for emails containing sensitive data sent to external addresses.
   • CMonitor the frequency of password changes.
   • DMonitor the size of the email database.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company has a reception desk where visitors sign in and receive a badge. However, employees often hold the door open for people they do not recognize, and visitors are not always escorted. The company wants to improve visitor management without hiring more staff. Which change is most effective?

   • ARequire visitors to show a government-issued ID at the reception desk.
   • BPost a sign at the entrance reminding employees not to hold the door for strangers.
   • CInstall a camera at the reception desk to record all visitors.
   • DImplement a visitor management system that requires a pre-registered host to approve the visit and issues a badge that expires at the end of the day.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Why is it important for employees to report social engineering attempts?

   • ATo increase the attacker's confidence
   • BTo enable the organization to respond and mitigate potential damage
   • CTo punish the employee who received the attempt
   • DTo avoid the need for security awareness training
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is an example of a security procedure that helps counter social engineering?

   • AVerifying a caller's identity through a known callback number before sharing sensitive data
   • BConducting annual penetration tests
   • CInstalling antivirus software on all endpoints
   • DRequiring employees to change their passwords every 90 days
   Reveal Solution Discussion Select an answer first