Social Engineering Quiz: Can You Beat The Hacker?

1. Which defense strategy is most effective against social engineering?

Employee security awareness training

Installing more firewalls

Using only encrypted passwords

Blocking all external emails

2. Which of the following reduces vulnerability to social engineering attacks?

Implementing strong authentication policies

Conducting regular security awareness training

Verifying requests through established channels

All of the above

Submit

4. What should employees do if they receive a suspicious email claiming to be from IT support?

Click the link to verify their account

Reply with personal information to confirm identity

Contact IT through an official channel to verify

Forward the email to coworkers

Submit

6. Which is a key indicator of a phishing email?

Requests for sensitive information via email

Generic greetings instead of your name

Suspicious or misspelled sender addresses

All of the above

7. Social engineering can be prevented entirely through technical controls alone. True or False?

True

False

8. An attacker leaving infected USB drives in a parking lot is using which technique?

Phishing

Baiting

Pretexting

Vishing

9. What is a pretext in social engineering?

A fabricated story or scenario created to build trust

A malicious software program

A network security protocol

A password reset procedure

10. Spear phishing is a targeted phishing attack directed at a specific individual or organization. True or False?

True

False

11. What is social engineering in the context of cybersecurity?

Using technical exploits to gain unauthorized system access

Manipulating people into disclosing confidential information or performing unsafe actions

Developing new software security patches

Creating firewalls to block network traffic

12. Social engineering attacks often rely on human psychology rather than technical vulnerabilities. True or False?

True

False

13. Which of the following is NOT a common social engineering target?

Help desk employees

New employees unfamiliar with security protocols

Employees in IT security departments

Executives with access to sensitive data

Submit

15. What does OSINT stand for in the context of social engineering?

Open Source Intelligence

Operational Security Intelligence

Online System Information Network

Offensive Security Integration Network

16. Which social engineering tactic uses urgency and authority to manipulate victims?

Spear phishing

Vishing (voice phishing)

Pretext calls claiming to be IT support

All of the above

17. Tailgating (piggybacking) is when an attacker follows an authorized person through a secure door. True or False?

True

False

18. What is baiting as a social engineering technique?

Offering something enticing (USB drive, gift card) to trick someone into compromising security

Sending urgent emails claiming account suspension

Installing malware directly on a target's device

Monitoring network traffic for sensitive data

19. Pretexting involves creating a false scenario to gain trust and extract information. True or False?

True

False

20. Which of the following is an example of a phishing attack?

Sending a fraudulent email pretending to be from a bank requesting login credentials

Installing antivirus software on company computers

Updating password policies quarterly

Encrypting all sensitive files on servers

Social Engineering Quiz: Can You Beat the Hacker?

1. Which defense strategy is most effective against social engineering?

2.

What first name or nickname would you like us to use?

2. Which of the following reduces vulnerability to social engineering attacks?

3. A social engineer impersonates a contractor to gain physical access to a building. This is ____.

4. What should employees do if they receive a suspicious email claiming to be from IT support?

5. Vishing is a phishing attack conducted over the ____.

6. Which is a key indicator of a phishing email?

7. Social engineering can be prevented entirely through technical controls alone. True or False?

8. An attacker leaving infected USB drives in a parking lot is using which technique?

9. What is a pretext in social engineering?

10. Spear phishing is a targeted phishing attack directed at a specific individual or organization. True or False?

11. What is social engineering in the context of cybersecurity?

12. Social engineering attacks often rely on human psychology rather than technical vulnerabilities. True or False?

13. Which of the following is NOT a common social engineering target?

14. A user receives a text message claiming to be from their bank asking to verify account details. This is an example of ____.

15. What does OSINT stand for in the context of social engineering?

16. Which social engineering tactic uses urgency and authority to manipulate victims?

17. Tailgating (piggybacking) is when an attacker follows an authorized person through a secure door. True or False?

18. What is baiting as a social engineering technique?

19. Pretexting involves creating a false scenario to gain trust and extract information. True or False?

20. Which of the following is an example of a phishing attack?