Which of the following security concepts can be overcome through soc al engineering? (Select TWO)

Question

Options

• APort blocking
• BStrong passwords
• CFirewalls
• DMAC filtering
• EEmail attachment filtering
• FAntivirus updates

• A
  3% (1)
• B
  70% (21)
• C
  7% (2)
• D
  17% (5)
• F
  3% (1)

Explanation

Social engineering attacks exploit human psychology rather than technical vulnerabilities, so the security controls it can bypass are those that depend on human behavior. Strong passwords (B) can be defeated through social engineering - an attacker can trick a user into revealing their password via phishing, pretexting (impersonating IT support), or vishing (voice phishing), completely bypassing the password's technical strength. Email attachment filtering (E) can be bypassed when an attacker convinces a user to disable filtering, whitelist a malicious sender, or retrieve a malicious file via an alternative method (cloud link, USB, etc.) rather than as a direct attachment. The remaining options - port blocking (A), firewalls (C), MAC filtering (D), and antivirus updates (F) - are purely technical controls implemented at the network or system level that operate independently of user action and cannot be disabled by manipulating a person alone.

No community discussion yet for this question.