What is the primary definition of social engineering in the context of security testing?

The manipulation of people to divulge confidential information or perform actions that compromise security

The use of technical exploits to bypass network security controls

The automated scanning of systems for vulnerabilities without user interaction

The process of physically breaking into a facility to steal hardware

What is the purpose of implementing a verification process for sensitive requests, such as wire transfers?

To ensure that requests are legitimate and authorized

To slow down all business operations

To make it easier for attackers to impersonate employees

To eliminate the need for employee training

Which of the following is an effective countermeasure against social engineering attacks?

Regular security awareness training for employees

Disabling all email communication

Certified Tester Security Tester

Domain 6Objective 5

Social Engineering CT-SEC Practice Questions (Page 2)

Part of the Human Factors in Security Testing domain, which makes up ~14% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

5concepts

Questions 6–10

6foundation · easy
Which psychological principle is most commonly exploited when an attacker impersonates a senior executive to request an urgent wire transfer?
Select an answer first
7application · medium
A security tester is conducting a physical penetration test for a client. The tester wants to gain access to a restricted server room. The tester notices an employee with a badge entering the door and quickly follows behind, holding a large box to appear as if they are carrying equipment. The employee holds the door open, and the tester enters without being challenged. Which social engineering vector is being used?
Select an answer first
8foundation · easy
What is the primary definition of social engineering in the context of security testing?
Select an answer first
9foundation · easy
What is the purpose of implementing a verification process for sensitive requests, such as wire transfers?
Select an answer first
10foundation · easy
Which of the following is an effective countermeasure against social engineering attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.

Social Engineering CT-SEC Practice Questions (Page 2)

Questions 6–10

Which psychological principle is most commonly exploited when an attacker impersonates a senior executive to request an urgent wire transfer?

What is the primary definition of social engineering in the context of security testing?

What is the purpose of implementing a verification process for sensitive requests, such as wire transfers?

Which of the following is an effective countermeasure against social engineering attacks?

Keep studying — Human Factors in Security Testing