Which is the MOST effective countermeasure against social engineering attacks?

Question

Options

• AEmployee security awareness training
• BStrong encryption algorithms
• CNetwork traffic monitoring
• DPort hardening

• A
  71% (22)
• B
  16% (5)
• C
  6% (2)
• D
  6% (2)

Explanation

Employee security awareness training (A) is the most effective countermeasure because social engineering exploits human psychology - not technical vulnerabilities - so the defense must also be human-centered: trained employees recognize manipulation tactics (phishing, pretexting, baiting) and refuse to comply.

Why the distractors fail:

• B (Encryption) protects data in transit/at rest but does nothing to stop a user who is tricked into voluntarily handing over credentials or access.
• C (Network monitoring) detects anomalies after the fact but can't prevent a user from being deceived before any suspicious traffic occurs.
• D (Port hardening) reduces the network attack surface but is irrelevant when the attacker bypasses technical controls entirely by manipulating a person.

Memory tip: Think of social engineering as a "people hack" - the only patch for a people vulnerability is a people solution (training). If the attack vector is human, the fix is human.

No community discussion yet for this question.