Social Engineering Countermeasures EHE Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A company is updating its security policies to address social engineering. They want to include procedures for verifying requests for sensitive information. Which policy element is most important to include?

   • AA requirement to respond to requests within one hour
   • BA list of all employees' personal phone numbers
   • CA statement that employees should trust their instincts
   • DA clear escalation path for suspicious requests and a requirement to use out-of-band verification
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A help desk technician receives a call from someone claiming to be a regional manager who urgently needs a password reset to meet a deadline. The caller is frustrated and pressures the technician to act immediately. The technician does not recognize the voice. According to standard verification procedures, what should the technician do first?

   • APerform the reset after the caller provides the manager's employee ID and birth date.
   • BAsk the caller to submit the request through the internal ticketing system and wait for approval.
   • CHang up and call the manager back using the phone number on file in the corporate directory.
   • DReset the password and then send a notification to the manager's email address.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   An organization is considering adding technical controls to reduce the risk of phishing. They have a limited budget and want to choose the control that provides the most protection for the least disruption. Which control should they choose?

   • ADeploy a web filter that blocks all newly registered domains.
   • BRequire users to change passwords every 30 days.
   • CImplement multi-factor authentication (MFA) for all users.
   • DDisable all email attachments.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which technical control can help mitigate the impact of credential-based social engineering attacks?

   • AIntrusion detection system (IDS)
   • BNetwork segmentation
   • CDisk encryption
   • DMulti-factor authentication (MFA)
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the main role of security awareness training in defending against social engineering?

   • ATo replace the need for technical security controls
   • BTo teach users how to recognize and resist manipulation attempts
   • CTo provide users with administrative access to systems
   • DTo ensure that users never make mistakes
   Reveal Solution Discussion Select an answer first