Social Engineering Countermeasures EHE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How can monitoring and auditing user activities help detect social engineering attacks?

   • ABy automatically blocking all suspicious emails
   • BBy preventing all social engineering attacks from occurring
   • CBy encrypting all user communications
   • DBy identifying unusual patterns of behavior that may indicate a compromised account
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A research lab wants to protect its intellectual property from physical social engineering attacks such as tailgating and impersonation. They have a limited budget and cannot afford a full-time security guard at every entrance. Which combination of physical controls would provide the best cost-effective defense?

   • AInstall mantraps at main entrances, use badge access with anti-passback, and require visitor escorts
   • BLock all doors and require employees to knock for entry
   • CHire security guards for all entrances
   • DUse only CCTV cameras and no access control
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is implementing a new verification procedure for wire transfer requests. The procedure requires a phone call to a known number to confirm the request. However, the finance team complains that this delays legitimate transfers and adds work. Which approach best addresses the conflict between security and efficiency?

   • ARequire phone verification for all transfers, regardless of amount.
   • BApply the phone verification only to transfers above a certain dollar amount, and use a faster but still secure method for smaller amounts.
   • CAllow the finance team to skip verification if they recognize the requester's voice.
   • DEliminate the phone verification and rely on email confirmation.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company is concerned about attackers using phone calls to trick helpdesk staff into resetting passwords. Which technical control would best mitigate this risk?

   • ARecord all helpdesk calls and store them indefinitely
   • BRequire helpdesk staff to use speakerphones
   • CImplement a callback verification system using a known phone number
   • DDisable all phone lines to the helpdesk
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to prevent unauthorized individuals from entering their office building by following employees through secure doors. Which physical security measure is most effective?

   • AUse keypad locks on all exterior doors
   • BImplement mantraps and require badge access with anti-passback
   • CInstall security cameras at all entrances
   • DPost security guards to monitor entrances
   Reveal Solution Discussion Select an answer first