Social Engineering Countermeasures EHE Practice Questions (Page 6)

Questions 26–30

1. 26application · easy

   An organization wants to establish clear rules for how employees should respond to requests for sensitive information, especially when received via email or phone. Which document should be created or updated?

   • AA list of employee birthdays
   • BA network diagram showing all internal systems
   • CA marketing brochure about the company's products
   • DA security policy that defines information classification and verification requirements
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security team is designing a security awareness program. They have a limited budget and want to maximize the reduction in successful social engineering attacks. Which training approach is most effective?

   • AConduct frequent, short, interactive training sessions that include realistic simulations and immediate feedback.
   • BProvide a comprehensive annual training course that covers all social engineering tactics.
   • CSend a monthly newsletter with tips on recognizing social engineering.
   • DRequire employees to watch a video about social engineering once a year.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company's help desk receives a call from someone claiming to be a senior executive who has forgotten their password and needs access urgently for a board meeting. The caller is very persuasive and provides the executive's name and department. The help desk has a policy that requires verification before password resets, but the executive is known to be impatient and the company values customer service. What is the best course of action?

   • AReset the password and require the executive to change it at the next login.
   • BAsk the caller to provide the executive's employee ID and date of birth.
   • CReset the password immediately to avoid upsetting the executive, then verify later.
   • DFollow the verification policy strictly and use a secondary verification method, such as calling back on a known number or using a pre-registered mobile device.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the purpose of verification procedures in countering social engineering?

   • ATo eliminate the need for security awareness training
   • BTo speed up the process of fulfilling requests
   • CTo provide a record of all employee communications
   • DTo confirm the identity of individuals and the legitimacy of requests before acting
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company wants to improve physical security to prevent unauthorized people from entering restricted areas by following employees through doors. Which measure is most effective?

   • APlace warning signs that say 'No Tailgating' near all entrances.
   • BIncrease the number of security cameras in hallways.
   • CInstall turnstiles that allow only one person to pass per valid badge swipe.
   • DConduct monthly security awareness training on tailgating.
   Reveal Solution Discussion Select an answer first