The Impact of Human Behavior on Security Risks CT-SEC Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which human behavior most directly increases the risk of an attacker gaining access to a system?

   • AAn employee writing down a complex password on a sticky note placed under the keyboard
   • BAn employee reporting a suspicious email to the IT department
   • CAn employee regularly updating software on their personal devices
   • DAn employee using a password manager to generate unique passwords
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is implementing a program to reduce insider threats. The security team wants to balance employee privacy with security monitoring. Which approach is most appropriate?

   • ARely solely on security awareness training
   • BImplement user activity monitoring with clear policies and consent
   • CImplement strict access controls and no monitoring
   • DMonitor all employee communications without notification
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Why does reusing the same password across multiple accounts increase security risk?

   • AIt makes passwords longer, which is a security benefit
   • BIt allows attackers to use credentials from one breached site to access other accounts
   • CIt makes passwords easier to remember, which is a security benefit
   • DIt reduces the number of passwords an attacker needs to guess
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A security tester is conducting a social engineering assessment. The tester wants to gain access to a secure facility. Which approach is most likely to succeed, considering human psychology?

   • ACall the facility manager and demand access, claiming to be a senior executive
   • BWait outside the facility and follow an employee through the door without asking
   • CDress as a delivery person and ask an employee to hold the door open
   • DSend a phishing email to an employee with a link to a fake badge request form
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which scenario is an example of pretexting?

   • AAn attacker sends a mass email with a malicious attachment disguised as an invoice
   • BAn attacker installs a keylogger on a public computer
   • CAn attacker calls an employee pretending to be from the IT department and asks for their password to 'fix a problem'
   • DAn attacker uses a fake Wi-Fi hotspot to intercept data
   Reveal Solution Discussion Select an answer first