A red team is conducting a social engineering assessment. The team has completed reconnaissance and is now deciding how to deliver the attack. The target organization has a strong security culture, and employees are trained to report suspicious emails. Which delivery method is most likely to succeed while minimizing the risk of detection?

Vishing call impersonating a trusted vendor

Phishing email with a malicious attachment

In-person pretexting at a company event

Smishing text with a link to a credential harvesting site

A security consultant is testing an organization's physical security. The consultant dresses as a delivery person and waits outside the main entrance, then follows an employee through the door into the building. Which attack vector and psychological trigger does this scenario illustrate?

In-person social engineering and social proof

A security team is developing a comprehensive defense against social engineering. Which of the following measures are effective organizational countermeasures? Select all that apply.

Enforcing a strict password policy that requires frequent changes

Implementing a clear desk policy

Conducting regular simulated phishing campaigns

Encouraging employees to share their experiences with social engineering attempts

Establishing a verification process for financial transactions

GIAC Offensive AI Analyst

Domain 1Objective 2

Social Engineering Fundamentals GOAA Practice Questions (Page 5)

Part of the AI Foundations and Social Engineering domain, which makes up ~29% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–23 in this domain), expect 5–8 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

5concepts

Questions 21–25

21foundation · easy
A security analyst receives a text message on their personal phone that appears to be from their bank, asking them to verify their account number by clicking a link. Which attack vector is this?
Select an answer first
22application · medium
An attacker sends an email to a company's finance team stating that a limited-time discount on software licenses is available only for the next 24 hours, and they must click a link to claim it. Which psychological trigger is the attacker primarily exploiting?
Select an answer first
23expert · hard
A red team is conducting a social engineering assessment. The team has completed reconnaissance and is now deciding how to deliver the attack. The target organization has a strong security culture, and employees are trained to report suspicious emails. Which delivery method is most likely to succeed while minimizing the risk of detection?
Select an answer first
24application · medium
A security consultant is testing an organization's physical security. The consultant dresses as a delivery person and waits outside the main entrance, then follows an employee through the door into the building. Which attack vector and psychological trigger does this scenario illustrate?
Select an answer first
25expert · hard · select all that apply
A security team is developing a comprehensive defense against social engineering. Which of the following measures are effective organizational countermeasures? Select all that apply.
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOAA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOAA” is a trademark of its owner, used for identification only.

Social Engineering Fundamentals GOAA Practice Questions (Page 5)

Questions 21–25

A security analyst receives a text message on their personal phone that appears to be from their bank, asking them to verify their account number by clicking a link. Which attack vector is this?

An attacker sends an email to a company's finance team stating that a limited-time discount on software licenses is available only for the next 24 hours, and they must click a link to claim it. Which psychological trigger is the attacker primarily exploiting?

A security consultant is testing an organization's physical security. The consultant dresses as a delivery person and waits outside the main entrance, then follows an employee through the door into the building. Which attack vector and psychological trigger does this scenario illustrate?

A security team is developing a comprehensive defense against social engineering. Which of the following measures are effective organizational countermeasures? Select all that apply.

Keep studying — AI Foundations and Social Engineering