nerdexam
CompTIA

FC0-U71 · Question #154

Which of the following is the best example of protection against social engineering?

The correct answer is A. Verifying the identity of a user via phone call. Protection against social engineering relies on verifying identities and distrusting unsolicited requests, making identity verification via an independent channel a key defense.

Security

Question

Which of the following is the best example of protection against social engineering?

Options

  • AVerifying the identity of a user via phone call
  • BScanning for malware on the network
  • CKeeping default passwords
  • DConnecting with people over social media

How the community answered

(39 responses)
  • A
    95% (37)
  • C
    3% (1)
  • D
    3% (1)

Why each option

Protection against social engineering relies on verifying identities and distrusting unsolicited requests, making identity verification via an independent channel a key defense.

AVerifying the identity of a user via phone callCorrect

Social engineering often involves tricking individuals into revealing sensitive information or performing actions; verifying a user's identity through a pre-established, trusted method like a callback prevents imposters from succeeding. This method ensures the person on the other end is who they claim to be, directly countering common social engineering tactics.

BScanning for malware on the network

Scanning for malware protects against malicious software but does not directly address the human manipulation aspect of social engineering.

CKeeping default passwords

Keeping default passwords is a major security vulnerability that social engineers might exploit if they learn the default, but it is not a protection against social engineering itself.

DConnecting with people over social media

Connecting with people over social media increases exposure to potential social engineering attempts, rather than protecting against them.

Concept tested: Social engineering prevention and countermeasures

Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/phishing/social-engineering-protection

Topics

#Social Engineering#Identity Verification#Security Awareness#Authentication

Community Discussion

No community discussion yet for this question.

Full FC0-U71 Practice