Social Engineering Defense

Sample assessment · 3 questions

Social Engineering Defense

Social Engineering Defense

Recognizing and defending against manipulation tactics including vishing, pretexting, and impersonation attacks.

1

When verifying a suspicious call from someone claiming to be from your bank, what is the correct 'Callback Verification' procedure?

A) Call them back immediately on the number they provide

B) Hang up and call back using the number on your bank statement, waiting 5 minutes first

C) Ask them to verify by providing your account details

D) Transfer the call to a colleague to double-check

2

In the Twitter Hack (2020), attackers called employees pretending to be IT support. Which of Cialdini's six principles of influence did they exploit by claiming there was an 'urgent security issue'?

A) Social Proof

B) Reciprocity

C) Urgency/Scarcity

D) Commitment/Consistency

3

Someone asks you to hold the door open as they enter your office building, saying their hands are full with boxes. What type of attack could this be?

A) Phishing

B) Vishing

C) Tailgating (Piggybacking)

D) Pretexting

Want to Go Deeper?

These hand-picked resources are optional—no compliance requirement. If you're curious, they're worth your time.