Social Engineering Fundamentals GOAA Practice Questions (Page 9)

Questions 41–44

1. 41application · medium

   A penetration tester is conducting a vishing attack. The tester has already gathered the target's name, job role, and recent travel plans from social media. The tester calls the target, pretends to be from the travel department, and asks for the target's corporate credit card number to 'confirm a booking'. After the call, the tester documents the results. Which stage of the social engineering attack cycle is the tester currently in when documenting the results?

   • ADebrief
   • BExecution
   • CReconnaissance
   • DPretexting
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which social engineering vector involves the use of voice calls or voicemail messages to deceive a target?

   • APhishing
   • BSmishing
   • CVishing
   • DIn-person social engineering
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Why does the presence of trust make individuals more susceptible to social engineering attacks?

   • ATrust reduces the target's tendency to verify requests
   • BTrust is a cognitive bias that always leads to poor decisions
   • CTrust makes people more likely to share passwords willingly
   • DTrust causes people to ignore all security policies
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A company has experienced several successful phishing attacks despite technical controls. The security team wants to implement a defense that directly addresses the human factor by providing immediate feedback when an employee clicks a simulated phishing link. Which countermeasure best fits this requirement?

   • AImplementing a simulated phishing program with real-time coaching
   • BConducting quarterly security awareness training sessions
   • CEnforcing multi-factor authentication on all accounts
   • DDeploying an email gateway with advanced threat protection
   Reveal Solution Discussion Select an answer first