Understanding Attack Scenarios and Motivations CT-SEC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which scenario best describes a pretexting attack?

   • AAn attacker intercepts network traffic to capture unencrypted data
   • BAn attacker creates a fake identity and story to gain access to a restricted area
   • CAn attacker uses a script to automatically try many passwords
   • DAn attacker sends a malicious attachment that installs malware when opened
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary impact of human factors on the success of a security attack?

   • AHuman factors have no significant impact on attack success
   • BHuman factors only affect physical security, not cyber attacks
   • CHuman error can create entry points that technical controls cannot fully prevent
   • DHuman factors are irrelevant if strong passwords are used
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   An attacker impersonates a senior manager to request sensitive information from an employee. Which human factor is being exploited?

   • AObedience to authority
   • BCuriosity
   • CLaziness
   • DFear of missing out
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security tester is conducting a social engineering assessment for a company that has a strong security culture. The tester wants to test the effectiveness of the company's security awareness training. Which approach would provide the most accurate assessment of the training's impact on human factors?

   • AAnalyzing the company's security incident logs
   • BReviewing the company's security policies and procedures
   • CConducting a simulated phishing campaign and measuring the click and report rates
   • DInterviewing employees about their security knowledge
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   After a security awareness training session, a company runs a simulated phishing campaign. The results show a 20% click rate. The security team wants to measure the impact of the training on human factors. Which metric would best indicate the training's effectiveness?

   • AThe time it took employees to open the email
   • BThe number of employees who deleted the email without opening it
   • CThe percentage of employees who reported the simulated phishing email
   • DThe number of employees who clicked the link
   Reveal Solution Discussion Select an answer first