Social Engineering Countermeasures EHE Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company's IT helpdesk receives a call from someone claiming to be a remote employee who forgot their password. The caller knows the employee's employee ID and home address. The helpdesk policy requires identity verification before resetting passwords. Which verification method is most secure?

   • AAsk for the employee's mother's maiden name
   • BAsk the caller to send an email from their personal email address
   • CVerify the caller's employee ID and home address
   • DUse a one-time passcode sent to the employee's registered mobile device
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   An employee reports a suspected phishing email to the security team. The security team wants to determine whether other employees have received the same email and whether anyone has clicked the link. Which combination of actions is most effective?

   • ASearch email logs for the email's subject or sender, and check web proxy logs for visits to the linked domain.
   • BAsk the employee who reported the email to forward it to all other employees.
   • CSend a company-wide email warning employees about the phishing attempt.
   • DBlock the sender's email address and move on.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following topics is typically covered in security awareness training to help users resist social engineering?

   • AHow to identify phishing emails and suspicious phone calls
   • BHow to write secure code
   • CHow to configure firewall rules
   • DHow to perform forensic analysis
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An organization wants to reduce the risk of employees being tricked into visiting malicious websites via email links. Which technical control is most effective when combined with user awareness training?

   • ARequire users to manually type URLs instead of clicking links.
   • BImplement a web filtering solution that blocks known malicious domains and categorizes suspicious sites.
   • CDisable JavaScript in all web browsers.
   • DIncrease the email retention period for all mailboxes.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security team wants to detect unusual patterns of data access that might indicate an insider is gathering information for a social engineering attack. Which monitoring approach would be most effective?

   • AIncrease password complexity requirements
   • BReview employee social media profiles
   • CDisable all file sharing
   • DImplement user and entity behavior analytics (UEBA) to baseline normal activity and alert on anomalies
   Reveal Solution Discussion Select an answer first