Social Engineering Quiz

Q1. MFA fatigue (push bombing) attacks rely on:

Cracking the second factor Repeated push prompts until the user approves one to make them stop Intercepting SMS Cloning the phone

Q2. Pretexting means:

Following someone through a door Inventing a believable scenario and role to justify the request Sending bulk email Searching bins

Q3. A homoglyph or typosquatted domain is used to:

Speed up DNS Make a malicious link visually resemble a trusted one Bypass TLS Enumerate mailboxes

Q4. The principle of urgency is used to:

Offer reciprocity Prevent the target from pausing to verify the request Build rapport Establish credibility

Q5. Helpdesk impersonation is countered most effectively by:

Recording all calls Longer passwords A strict identity verification procedure for any credential or MFA reset More staff

Q6. Why is social engineering effective?

Encryption does not exist Firewalls are always disabled DNS is insecure Humans are susceptible and may be careless with valuable information

Q7. Computer-based social engineering is carried out with the help of:

Only routers Computers Only switches Only printers

Q8. The most effective control against BEC payment fraud is:

Spam filtering alone Out-of-band verification of any change to payment details Longer passwords Antivirus

Q9. Impersonation on social networks can involve:

Patching profiles Scanning ports Encrypting social media Creating accounts in others' names

Q10. Vishing is social engineering conducted via:

SMS Voice calls Physical mail Email

Q11. Pop-up windows may ask users to:

Run a port scan Provide information or sign in Patch a router Change a DNS zone

Q12. Smishing uses which channel?

SMS text messages Email attachments Instant messaging only Fax

Q13. Whaling targets:

IT administrators only Random employees Suppliers Senior executives with authority over funds

Q14. The most accurate statement about social engineering defence is:

Layered technical controls plus a reporting culture reduce it substantially Technology alone solves it Only executives need training It is impossible to defend against

Q15. Developing a relationship is intended to:

Build trust with the selected employee Change DNS Improve firewall rules Patch software