Social Engineering Fundamentals
GOAA · 20 questions
- A city red-team charter sets goals for an authorized social-engineering exercise. Which objective best aligns with ethical municipal awareness practice?
- A county clerk tabletop maps social-engineering attack surfaces for civic centers. Which set best represents common surfaces to inventory?
- A transit SE exercise uses an approved script where a caller claims rail control needs VPN access immediately. Which psychological levers are most clearly in play?
- Water-utility counsel reviews a planned social-engineering test involving employee pretexting. What legal-control practice is most appropriate first?
- A school-district policy governs authorized social-engineering drills. Which boundary best reflects ethical civic/education constraints?
- A housing-authority awareness brief must explain common social-engineering technique families at a concept level. Which contrast is most accurate?
- A fusion-center briefing covers recording vishing-style authorized test calls. What legal consideration should testers articulate?
- A parks department physical social-engineering test checks access to badge-only maintenance areas. What surface is primarily under test?
- A public-health social-engineering objective focuses on desks that handle protected health information. Which objective framing is most appropriate?
- A city ethics board reviews proposed pretexts for an employee social-engineering drill. Which judgment best reflects ethical scenario design?
- A county attack-surface briefing ranks social-engineering targets for an authorized awareness program. Why is the shared help desk often treated as a high-value target?
- A transit purple team runs live authorized social-engineering scenarios. Which OPSEC practice best protects the engagement?
- A municipal SE psychology module maps classic influence principles to permit-office scam patterns. Which mapping best illustrates those principles in a civic context?
- A court security policy covers authorized employee social-engineering drills. Which control best embeds welfare and ethics stop-conditions?
- A water SOC reviews proposed social-engineering activities. Which distinction correctly keeps practice inside authorized civic scope?
- A school board asks how social-engineering exercise results should be used for staff. Which recommendation best reflects ethical municipal practice?
- A city social-engineering program defines success metrics for culture change. Which objective is most realistic and aligned with defensive practice?
- A housing-authority IR playbook categorizes how adversaries first get in. Where does social engineering correctly belong?
- A county legal memo addresses social-engineering and pentest boundaries. Which statement best captures the legal risk of exceeding rules of engagement?
- A municipal SE fundamentals quiz asks why a 'mayor's office' pretext can be unusually effective against staff. Which principle best explains it?