Social Engineering CT-SEC Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company wants to reduce the risk of tailgating at its main entrance. The entrance currently has a security guard who checks badges visually, but employees often hold the door open for others. Which countermeasure would be MOST effective in preventing tailgating?

   • AIncrease the number of security guards
   • BPost a sign reminding employees not to hold the door open
   • CInstall a turnstile with a one-person pass-through mechanism
   • DAdd a second security camera at the entrance
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What should be included in a report of social engineering testing results?

   • AThe exact passwords and credentials obtained during the test
   • BA summary of the attack methods used and recommendations for improvement
   • COnly the names of employees who fell for the attack
   • DA detailed guide on how to replicate the attacks
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Why is social engineering considered a relevant concern in security testing?

   • AIt helps identify weaknesses in human behavior that could be exploited by attackers
   • BIt is a legal requirement for all security audits
   • CIt is the only method to test physical security controls
   • DIt replaces the need for technical vulnerability assessments
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A security tester is crafting a phishing email for a client's assessment. The client wants to test the effectiveness of their security awareness training. The tester wants to maximize the likelihood of employees clicking the link. Which combination of psychological principles would be MOST effective?

   • AScarcity and social proof
   • BUrgency and scarcity
   • CReciprocity and trust
   • DAuthority and urgency
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company wants to implement a countermeasure to reduce the risk of pretexting attacks over the phone. Which policy would be MOST effective?

   • AUse a caller ID display to identify incoming calls
   • BTrain employees to be polite but firm when refusing requests
   • CProhibit employees from discussing any company information over the phone
   • DRequire callers to verify their identity using a callback to a known number
   Reveal Solution Discussion Select an answer first