Certified Ethical Hacker Social Engineering and Physical Security 2

Question 1

An attacker sends an email claiming to be from the IT helpdesk, urgently requesting the user reset their password via an included link. Which social engineering principle is MOST being exploited?

Accepted Answer

Authority and urgency

Answer

Impersonating IT (authority) plus an urgent deadline pressures the victim into acting without verifying.

Question 2

What is the term for digging through an organization's trash to recover sensitive documents, sticky notes, or discarded media?

Accepted Answer

Dumpster diving

Answer

Dumpster diving recovers improperly discarded information that may contain credentials or internal data.

Question 3

An attacker drops several USB flash drives labeled 'Salaries 2026' in a company parking lot hoping employees plug them in. This attack is called:

Accepted Answer

Baiting

Answer

Baiting lures victims with an enticing physical or digital item that delivers malware when used.

Question 4

Which countermeasure is MOST effective against tailgating into a secure facility?

Accepted Answer

Mantraps with anti-passback controls

Answer

A mantrap allows only one authenticated person through at a time, preventing an unauthorized follower.

Question 5

A phishing attack specifically targeting a company's CEO or other high-value executives is known as:

Accepted Answer

Whaling

Answer

Whaling is spear phishing aimed at senior executives or 'big fish' for high-impact access.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Social Engineering and Physical Security 2