Which of the following preventive controls are necessary to provide adequate security for social engineering threats?
A) Controlling remote access
B) Encryption
C) Host and application hardening
D) Awareness training

Question

Quizplus · Accepted Answer

Social engineering attacks exploit human vulnerabilities such as ignorance, trust, greed, and fear. Awareness training is the most effective preventive control against social engineering threats. By providing regular training to employees, organizations can create a culture of security awareness and help employees recognize and respond appropriately to social engineering attempts. Controlling remote access, encryption, and host and application hardening are important security controls, but they do not specifically address social engineering threats.

Which of the Following Preventive Controls Are Necessary to Provide