Back to Threat Analysis and Vulnerability Scanning

Social Engineering

5 minutes 5 Questions

Social Engineering is a set of strategies and tactics employed by threat actors to manipulate, deceive, or otherwise influence individuals into divulging sensitive information, granting unauthorized access, or installing malicious software on their computer systems. These tactics often prey on the …

Test mode:
Start practice test
CompTIA Security+ - Social Engineering Example Questions

Test your knowledge of Social Engineering

Question 1

A project manager receives a call from a vendor about a pending invoice. The vendor claims that their payment information has changed and asks for payments to be sent to their new bank account. What should the project manager do?

Correct Answer: Verify the vendor's identity and confirm the requested changes through a previously known, trusted contact.

The best response is to verify the vendor's identity and confirm the requested changes through a previously known, trusted contact, to avoid potential social engineering scams. Never provide or update sensitive information without thorough verification.

Question 2

An employee receives an email from a coworker who wants to know their supervisor's office hours as the coworker cannot locate their supervisor. The employee suspects the coworker is trying to gain unauthorized access. What should the employee do?

Correct Answer: Contact the coworker directly via phone or in person to verify their intent.

The correct answer verifies the coworker's intent by contacting them through a known communication method, reducing the risk of unauthorized access using social engineering.

Question 3

A user receives an unexpected email from a coworker with multiple attachments. The user was not expecting any attachments from this coworker. What should the user do?

Correct Answer: Contact the coworker through another method to verify the attachments

By contacting the coworker through a different method, the user can verify the authenticity of the email, ensuring it's not a social engineering attempt.

More Social Engineering questions
42 questions (total)
Start 42 question test