Social Engineering Countermeasures EHE Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   What is the first step an employee should take when they suspect a social engineering attempt?

   • AReport it to the appropriate security or IT team
   • BDelete all related emails and files
   • CIgnore the attempt and continue working
   • DConfront the attacker directly
   Reveal Solution Discussion Select an answer first
2. 42expert · medium

   A security team is investigating a potential social engineering attack where an attacker may have obtained employee credentials. They want to determine if any accounts were used from unusual locations. Which monitoring data would be most useful?

   • APrinter usage logs
   • BEmail content logs
   • CAuthentication logs with source IP addresses and geolocation
   • DPhysical access logs
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which of the following is a category of social engineering countermeasures?

   • ATechnical controls
   • BDetective controls
   • CCryptographic controls
   • DCompensating controls
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   How do security policies and procedures help prevent social engineering attacks?

   • ABy monitoring employee productivity and internet usage
   • BBy providing clear rules for handling sensitive information and verifying requests
   • CBy automatically blocking all suspicious emails before they reach users
   • DBy encrypting all data stored on company servers
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   An organization wants to reduce the risk of employees falling for phishing emails that request credential entry on fake login pages. Which combination of technical controls would be most effective as a countermeasure?

   • AEnable single sign-on (SSO) and disable password expiration
   • BIncrease email storage quotas and enable auto-forwarding rules
   • CInstall endpoint antivirus and block all USB ports
   • DDeploy spam filtering, web filtering, and enforce multi-factor authentication (MFA)
   Reveal Solution Discussion Select an answer first