A+ Social Engineering Quiz: Can You Spot The Attack?

1. Which is NOT a common social engineering technique?

Authority impersonation

Reverse engineering source code

Quid pro quo

Intimidation and urgency tactics

2. True or False: Social engineering is considered one of the most effective attack vectors because it exploits human psychology rather than technical vulnerabilities.

True

False

3. Which organizational policy best mitigates tailgating attacks?

Badge systems with multi-factor authentication

Removing all door locks

Allowing unlimited visitor access

Using only manual sign-in sheets

Submit

5. What is the primary motivation behind most social engineering attacks?

To test network security

To gain unauthorized access or steal sensitive data

To improve employee training

To document security procedures

6. True or False: Clicking a link in a phishing email immediately compromises your entire computer.

True

False

7. Which best practice helps prevent social engineering attacks in an organization?

Implementing strict password policies and MFA

Restricting all employee communication

Avoiding all external emails

Using only hardcoded passwords

Submit

9. True or False: Employees should use the same password across multiple systems for easier memorization.

True

False

10. What does quid pro quo mean in the context of social engineering?

Offering a reward or service in exchange for information

Creating fake credentials

Intercepting network traffic

Bypassing password protections

11. Which social engineering attack involves an attacker posing as a trusted authority to extract sensitive information?

Phishing

Pretexting

Baiting

Tailgating

Submit

13. What should employees do if they receive a suspicious email requesting sensitive information?

Reply with the requested information to verify the sender

Forward it to IT security without clicking any links

Delete it immediately without reporting

Call the sender to confirm their identity

14. True or False: Social engineering attacks always require technical hacking skills.

True

False

15. Which defense is most effective against social engineering attacks?

Installing more firewalls

User awareness training and education

Using stronger encryption only

Disabling all email functionality

Submit

17. Which of the following is a key indicator of a spear phishing attack?

It is sent to random email addresses

It uses generic greetings like 'Dear Customer'

It is highly personalized with victim-specific details

It always contains file attachments

18. What is tailgating in the context of physical security?

Following someone through a secured entrance without authorization

Monitoring email traffic for suspicious content

Sending unsolicited bulk messages

Installing spyware on company computers

19. Baiting attacks typically exploit human curiosity by offering something enticing. Which is a common baiting scenario?

Leaving infected USB drives in public areas

Sending fake system update notifications

Calling employees asking for passwords

Following employees through secured doors

20. What is the primary goal of a phishing email attack?

To crash the email server

To trick users into revealing credentials or clicking malicious links

To encrypt all company files

To disable firewall protections

A+ Social Engineering Quiz: Can You Spot the Attack?

1. Which is NOT a common social engineering technique?

2.

What first name or nickname would you like us to use?

2. True or False: Social engineering is considered one of the most effective attack vectors because it exploits human psychology rather than technical vulnerabilities.

3. Which organizational policy best mitigates tailgating attacks?

4. A technique where an attacker creates urgency or panic to rush someone into making a security mistake is ____.

5. What is the primary motivation behind most social engineering attacks?

6. True or False: Clicking a link in a phishing email immediately compromises your entire computer.

7. Which best practice helps prevent social engineering attacks in an organization?

8. An attack that impersonates a legitimate organization via email or phone to steal credentials is ____.

9. True or False: Employees should use the same password across multiple systems for easier memorization.

10. What does quid pro quo mean in the context of social engineering?

11. Which social engineering attack involves an attacker posing as a trusted authority to extract sensitive information?

12. A social engineering attack that creates a false scenario to manipulate someone into divulging information is called ____.

13. What should employees do if they receive a suspicious email requesting sensitive information?

14. True or False: Social engineering attacks always require technical hacking skills.

15. Which defense is most effective against social engineering attacks?

16. An attacker calls an employee pretending to be from IT support to reset their password. This is an example of ____.

17. Which of the following is a key indicator of a spear phishing attack?

18. What is tailgating in the context of physical security?

19. Baiting attacks typically exploit human curiosity by offering something enticing. Which is a common baiting scenario?

20. What is the primary goal of a phishing email attack?