Social Engineering Countermeasures EHE Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard · select all that apply

   A company wants to improve its incident response to social engineering attacks. Which practices should be included in their incident response plan? Select all that apply.

   • AIntegrate social engineering incidents into the broader security monitoring and alerting systems
   • BEstablish a clear reporting channel for employees to report suspicious interactions
   • CConduct post-incident reviews to identify lessons learned
   • DPunish employees who fall for attacks to deter others
   Check answers Discussion Select an answer first
2. 17foundation · easy

   Which of the following is an example of a verification procedure?

   • AAsking the requester for their email address
   • BCalling the requester back on a previously known phone number
   • CChecking the requester's social media profile
   • DTrusting the caller ID displayed on the phone
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   An organization wants to measure the effectiveness of its security awareness training. Which approach would provide the most meaningful assessment?

   • AAsk employees to complete a quiz after training
   • BConduct simulated phishing campaigns and track click rates over time
   • CReview helpdesk tickets for password resets
   • DCount the number of employees who completed the training
   Reveal Solution Discussion Select an answer first
5. 19application · easy

   A company has a high turnover rate and needs to ensure new employees quickly learn how to recognize and respond to social engineering. Which training method would be most effective for this situation?

   • AProvide mandatory security awareness training during onboarding and periodic refresher courses
   • BGive new employees a handbook to read on their own time
   • CRely on informal mentoring from coworkers
   • DWait until after the first incident to provide training
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company allows employees to enter the building by swiping their badge. A visitor is seen following an employee through the door without swiping a badge. The employee does not challenge the visitor. Which combination of physical security measures would best prevent this type of tailgating?

   • ARequire employees to wear visible ID badges at all times.
   • BInstall a mantraps with two interlocking doors and enforce a clear-desk policy.
   • CAdd a security guard at the entrance and require visitors to sign in and be escorted.
   • DUse security cameras and post signs reminding employees to report tailgating.
   Reveal Solution Discussion Select an answer first