A+ Social Engineering Attack Vectors and Defenses Quiz

1. What is the primary goal of implementing a clean desk policy?

To improve office aesthetics

To prevent unauthorized access to sensitive documents left unattended

To reduce paper waste

To standardize office furniture

2. Which of the following is NOT a common social engineering tactic?

Phishing

Pretexting

Encryption

Baiting

Submit

4. What is the primary purpose of security awareness training in defending against social engineering?

To eliminate all network threats

To educate employees on recognizing and reporting suspicious activities

To replace technical security controls

To monitor employee productivity

5. Spear phishing targets specific individuals or organizations with personalized messages. True or False?

True

False

6. Which control helps prevent unauthorized physical access to secure areas?

Badge readers and access control systems

Email encryption

Software firewalls

Antivirus software

Submit

8. What is the best practice for handling requests for sensitive information over email?

Always respond immediately

Verify the sender's identity through a separate channel before providing information

Forward the request to colleagues for consensus

Reply with partial information only

9. Which of the following is an example of credential harvesting?

A fake login page collecting usernames and passwords

A network administrator backing up user accounts

A password manager storing encrypted credentials

An organization implementing single sign-on

Submit

11. What is social engineering in the context of cybersecurity?

Using technical exploits to breach firewalls

Manipulating people into divulging confidential information or performing security-compromising actions

Installing malware on network servers

Encrypting data to prevent unauthorized access

12. Reverse social engineering is when an attacker positions themselves as an authority figure or helper. True or False?

True

False

13. Which defense strategy involves verifying the identity of anyone requesting sensitive information?

Data encryption

Callback verification

Firewall configuration

Antivirus deployment

Submit

15. Which of the following is a defense against phishing attacks?

User security awareness training

Email filtering and spam detection

Multi-factor authentication

All of the above

16. Quid pro quo is a social engineering tactic where the attacker offers something valuable in exchange for information. True or False?

True

False

17. Baiting attacks typically involve leaving physical items like USB drives or external hard drives in public areas. What is the attacker's goal?

To test network bandwidth

To encourage people to plug them in and execute malware

To measure storage device capacity

To track inventory of company equipment

18. What does tailgating in physical security refer to?

Monitoring employee social media accounts

Following an authorized person through a secure door without using credentials

Tracking vehicles in the parking lot

Recording conversations in conference rooms

Submit

20. Which attack type involves sending fraudulent emails that appear to come from legitimate sources?

Baiting

Pretexting

Phishing

Tailgating

A+ Social Engineering Attack Vectors and Defenses Quiz

1. What is the primary goal of implementing a clean desk policy?

2.

What first name or nickname would you like us to use?

2. Which of the following is NOT a common social engineering tactic?

3. A ____ policy requires employees to verify the identity of anyone requesting access to facilities or information.

4. What is the primary purpose of security awareness training in defending against social engineering?

5. Spear phishing targets specific individuals or organizations with personalized messages. True or False?

6. Which control helps prevent unauthorized physical access to secure areas?

7. An attack that impersonates a trusted entity to gain unauthorized access is called ____.

8. What is the best practice for handling requests for sensitive information over email?

9. Which of the following is an example of credential harvesting?

10. A vishing attack is a social engineering method that uses ____.

11. What is social engineering in the context of cybersecurity?

12. Reverse social engineering is when an attacker positions themselves as an authority figure or helper. True or False?

13. Which defense strategy involves verifying the identity of anyone requesting sensitive information?

14. A technique where an attacker researches personal information about a target before contacting them is called ____.

15. Which of the following is a defense against phishing attacks?

16. Quid pro quo is a social engineering tactic where the attacker offers something valuable in exchange for information. True or False?

17. Baiting attacks typically involve leaving physical items like USB drives or external hard drives in public areas. What is the attacker's goal?

18. What does tailgating in physical security refer to?

19. A person calls an employee claiming to be from IT support and requests their password. This is an example of ____.

20. Which attack type involves sending fraudulent emails that appear to come from legitimate sources?