Social Engineering Countermeasures EHE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company has experienced several vishing (voice phishing) attacks where employees were tricked into revealing their credentials over the phone. Which training approach would best reduce the success of these attacks?

   • ARequire employees to change passwords monthly
   • BSend a one-time email reminder about phishing risks
   • CPost posters near phones reminding employees to be cautious
   • DConduct role-based training that includes simulated vishing calls and verification procedures
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An employee receives a phone call from someone claiming to be from IT, asking for their password to 'fix a problem.' The employee suspects it is a social engineering attempt. What should the employee do?

   • AProvide the password and then change it after the call.
   • BReport the call to the security team immediately and do not provide any information.
   • CIgnore the call and continue working without telling anyone.
   • DAsk the caller to verify their identity by providing their employee ID.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is an example of auditing that helps detect social engineering?

   • AEncrypting email communications
   • BInstalling a firewall
   • CConducting background checks on new employees
   • DReviewing logs of employee login times and locations
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company is writing a security policy to address social engineering. The policy must be practical and enforceable. Which statement is the best example of a policy that employees are likely to follow?

   • AEmployees must never share any information with anyone over the phone.
   • BEmployees must always be suspicious of any request for information.
   • CEmployees must verify any request for sensitive information by calling the requester back on a number listed in the corporate directory before providing the information.
   • DEmployees should use their best judgment when handling requests for information.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst notices a series of unusual outbound emails from a finance department account, each containing large attachments sent to an external address. The account owner denies sending them. Which monitoring or auditing control would best help the analyst determine whether the account is compromised?

   • ADisable the account immediately and wait for the user to request re-enablement.
   • BSend a test email to the external address to see if it bounces.
   • CReview the account's login history and email access logs for anomalies such as logins from unusual locations or times.
   • DIncrease the spam filter sensitivity for that user's mailbox.
   Reveal Solution Discussion Select an answer first