lab 33

Question 1

What is the best defense against social engineering attacks

Ingress firewall rules
Multifactor authentication
Detailed auditing
Training and attack demonstrations/walkthroughs

Answer 1

Training and attack demonstrations/walkthroughs

Question 2

A social engineering attack is often long and complex. They usually involve dozens of interactions between the attacker and the victim.

True
False

Answer 2

False

Question 3

What technical defense would be a means to prevent the social engineering attack of this lab from being successful? (Select two)

Strict egress firewall rules
Blocking the execution of all unknown code
Using a VPN
Require a biometric factor during authentication
Limiting sessions to 6 hours or less

Answer 3

Strict egress firewall rules
Blocking the execution of all unknown code
Using a VPN

Question 4

What type of training enhances users’ ability to recognize and respond to potential security threats or suspicious activities, emphasizes the importance of being vigilant, observing surroundings, and promptly reporting any unusual or problematic incidents that may pose a security risk?

Situational Awareness
Insider Threat
Operational Security
Hybrid/Remote Work Environments

Answer 4

Situational Awareness

Question 5

Social engineering attacks originate only from outside the organization.

True
False

Answer 5

False