Certified Ethical Hacker Social Engineering and Physical Security 2

Question 1

An attacker sends an email claiming to be from the IT helpdesk, urgently requesting the user reset their password via an included link. Which social engineering principle is MOST being exploited?

Accepted Answer

Authority and urgency

Answer

Reciprocity

Answer

Social proof

Answer

Scarcity of resources

Question 2

What is the term for digging through an organization's trash to recover sensitive documents, sticky notes, or discarded media?

Accepted Answer

Dumpster diving

Answer

Shoulder surfing

Answer

Tailgating

Answer

Pretexting

Question 3

An attacker drops several USB flash drives labeled 'Salaries 2026' in a company parking lot hoping employees plug them in. This attack is called:

Accepted Answer

Baiting

Answer

Vishing

Answer

Whaling

Answer

Quid pro quo

Question 4

Which countermeasure is MOST effective against tailgating into a secure facility?

Accepted Answer

Mantraps with anti-passback controls

Answer

Stronger Wi-Fi passwords

Answer

Email spam filters

Answer

Endpoint antivirus

Question 5

A phishing attack specifically targeting a company's CEO or other high-value executives is known as:

Accepted Answer

Whaling

Answer

Smishing

Answer

Pharming

Answer

Spear phishing of interns

Question 6

During a pretexting call, an attacker pretends to be a vendor needing to 'verify' an account before processing a refund. What is the attacker primarily relying on?

Accepted Answer

A fabricated scenario to build trust

Answer

A zero-day exploit

Answer

A brute-force tool

Answer

An SQL injection payload

Question 7

Which security awareness practice BEST reduces the success rate of social engineering attacks over time?

Accepted Answer

Regular phishing simulations and training

Answer

Disabling all USB ports permanently

Answer

Increasing monitor brightness

Answer

Rotating office furniture