Social Engineering Countermeasures EHE Practice Questions (Page 11)

Questions 51–55

1. 51application · medium

   An organization has a security awareness program that includes an annual online course and a poster campaign. After a simulated phishing test, 15% of employees still clicked a malicious link. The security team wants to improve the program without adding significant cost. Which approach is most effective?

   • AConduct quarterly simulated phishing campaigns with immediate, personalized feedback for those who click.
   • BIncrease the number of posters in high-traffic areas.
   • CSend a company-wide email warning employees about phishing.
   • DReplace the annual course with a longer, more detailed training video.
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A company wants to encourage employees to report social engineering attempts without fear of punishment. Which practice best supports this goal?

   • AEstablish a non-punitive reporting policy that focuses on learning and improvement
   • BRequire employees to report only if they fell for the attack
   • CPublicly name employees who report incidents
   • DAutomatically terminate employees who are targeted
   Reveal Solution Discussion Select an answer first
4. 53expert · hard

   A financial firm wants to reduce the risk of business email compromise (BEC) where attackers impersonate executives to request wire transfers. They have already implemented MFA and spam filtering. Which additional control would be most effective in preventing the fraudulent transfer?

   • ADisable all external email
   • BImplement a dual-approval process for wire transfers that requires out-of-band verification
   • CIncrease email retention periods
   • DDeploy a next-generation firewall with intrusion prevention
   Reveal Solution Discussion Select an answer first
5. 54application · easy

   An employee receives a suspicious email that appears to be from the IT department asking for their password to 'verify account activity'. The employee recognizes this as a potential phishing attempt. What should the employee do first?

   • AReply to the email asking for more information
   • BReport the email to the security team using the organization's incident reporting process
   • CDelete the email and forget about it
   • DForward the email to all employees to warn them
   Reveal Solution Discussion Select an answer first
6. 55foundation · easy

   What is the purpose of a visitor management process in physical security?

   • ATo track and control the access of non-employees to the facility
   • BTo manage email spam filters
   • CTo provide network access to guests
   • DTo monitor employee productivity
   Reveal Solution Discussion Select an answer first