MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which term describes a process where information is discreetly gathered from people in a conversation?
   a. Encryption
   b. Elicitation
   c. Authentication
   d. Phishing
   Answer: b. Elicitationkeepnetlabs+1
2. What is the primary goal of elicitation in cybersecurity?
   a. To bypass passwords
   b. To quietly access sensitive information
   c. To install malware
   d. To speed up networks
   Answer: b. To quietly access sensitive informationsciencedirect+1
3. Which tactic is commonly used by attackers to elicit information?
   a. Flattery
   b. Physical theft
   c. Denial of service
   d. Hardware failure
   Answer: a. Flatteryhackcontrol+1
4. Elicitation is a core technique of which broader social engineering attack type?
   a. Code injection
   b. Social engineering
   c. Ransomware
   d. Brute force
   Answer: b. Social engineeringwikipedia+1
5. Which is NOT a common approach in elicitation?
   a. Asking direct questions
   b. Using casual conversation
   c. Making false statements
   d. Complimenting the target
   Answer: a. Asking direct questionsigorvitale+1
6. In elicitation, why might attackers use false statements?
   a. To confuse computer systems
   b. To provoke a corrective response from the target
   c. To perform calculations
   d. To scan networks
   Answer: b. To provoke a corrective response from the targethackcontrol+1
7. Sharing sensitive information in a relaxed environment is risky because of which tactic?
   a. Physical hacking
   b. Elicitation
   c. Formatting errors
   d. Installation failures
   Answer: b. Elicitationyoutubekeepnetlabs
8. A common elicitation scenario involves someone asking about workplace security measures. What is the risk?
   a. Malware infection
   b. Revealing operational details
   c. Network upgrades
   d. Hardware changes
   Answer: b. Revealing operational detailskeepnetlabs+1
9. What percentage of cyberattacks involve social engineering techniques, as per recent studies?
   a. 20%
   b. 50%
   c. 98%
   d. 10%
   Answer: c. 98%keepnetlabs
10. Which of the following is recommended to prevent elicitation attacks?
    a. Share details freely
    b. Be suspicious of casual questions about work
    c. Install more printers
    d. Use public Wi-Fi
    Answer: b. Be suspicious of casual questions about workyoutubekeepnetlabs
11. An individual receiving unexpected praise about their expertise might unconsciously reveal more information due to:
    a. Network scanning
    b. Flattery elicitation
    c. Data encryption
    d. Strong password usage
    Answer: b. Flattery elicitationigorvitale+1
12. Elicitation attempts are often successful because of human traits like:
    a. Technical skills
    b. Trust and curiosity
    c. Programming errors
    d. Firewall strength
    Answer: b. Trust and curiosityyoutubekeepnetlabs
13. Which term best describes posing as a third party to gain information in elicitation?
    a. Phishing
    b. Use of third person
    c. DDoS attack
    d. Deepfake
    Answer: b. Use of third personigorvitale
14. What is a subtle sign that someone may be trying to elicit sensitive information?
    a. They discuss movies
    b. They ask for work details in an informal setting
    c. They fix your computer
    d. They send you memes
    Answer: b. They ask for work details in an informal settingsciencedirect+1
15. Which statement is true regarding direct questions in elicitation?
    a. They are more successful than indirect methods
    b. They often raise suspicion
    c. They are never used
    d. They require software
    Answer: b. They often raise suspicionsciencedirect+1
16. What should an employee do if unsure about a question’s intent during a conversation?
    a. Share details to be friendly
    b. Politely decline or change subject
    c. Give out passwords
    d. Run diagnostic tests
    Answer: b. Politely decline or change subjecttestpros+1
17. Which psychological method is used to make targets comfortable during elicitation?
    a. Aggressive questioning
    b. Building rapport
    c. System reboot
    d. Network mapping
    Answer: b. Building rapportkeepnetlabs+1
18. The use of half sentences to get the target to complete your thought is called:
    a. Bracketing
    b. Half sentence method
    c. Direct approach
    d. SQL injection
    Answer: b. Half sentence methodigorvitale
19. Why are casual conversations at conferences or social events risky for organizations?
    a. Viruses may spread
    b. Elicitation can occur without notice
    c. Slow network speed
    d. Printer malfunction
    Answer: b. Elicitation can occur without noticesciencedirect+1
20. Making a provocative statement to elicit a defensive response is a known technique called:
    a. Provocative statements
    b. Malware analysis
    c. DNS spoofing
    d. Role based access
    Answer: a. Provocative statementsigorvitale
21. Which is a best practice for organizations to defend against elicitation?
    a. Frequent open-door meetings
    b. Education and security awareness training
    c. Giving guest tours
    d. Unlimited wireless access
    Answer: b. Education and security awareness trainingyoutubekeepnetlabs
22. What is the danger of verbal tracing in elicitation?
    a. Tracing IP addresses
    b. Guiding conversation toward sensitive subjects
    c. Encrypting files
    d. Filtering spam emails
    Answer: b. Guiding conversation toward sensitive subjectssciencedirect+1
23. Bracketing involves:
    a. Giving a range of possible answers to coax specifics
    b. Sending phishing emails
    c. Installing spyware
    d. Bypassing firewalls
    Answer: a. Giving a range of possible answers to coax specificsigorvitale+1
24. Why is elicitation hard to detect?
    a. It is always done online
    b. It disguises itself as normal conversation
    c. It requires hardware hacking
    d. It involves viruses
    Answer: b. It disguises itself as normal conversationtestpros+1
25. What are typical topics attackers may try to elicit?
    a. Security procedures
    b. Public holidays
    c. Computer games
    d. Food menus
    Answer: a. Security procedureskeepnetlabs+1
26. Which emotion is least likely to be exploited in elicitation?
    a. Trust
    b. Curiosity
    c. Anger
    d. Boredom
    Answer: d. Boredomkeepnetlabs+1
27. “Are you still using the same old firewall?” is an example of:
    a. Technical review
    b. Elicitation through indirect questioning
    c. Hardware maintenance
    d. User authentication
    Answer: b. Elicitation through indirect questioningsciencedirect+1
28. What should employees do if a stranger asks detailed questions about the company?
    a. Provide full answers
    b. Refer to public information only
    c. Ignore physical security
    d. Upgrade the firewall
    Answer: b. Refer to public information onlyyoutubekeepnetlabs
29. Elicitation is especially effective on:
    a. Automated machines
    b. People not expecting information attacks
    c. Lockdown systems
    d. Data backup software
    Answer: b. People not expecting information attackskeepnetlabs+1
30. Which method should not be used when trying to prevent elicitation?
    a. Educating employees
    b. Encouraging open discussion of critical systems with strangers
    c. Defining sensitive information
    d. Monitoring unusual behavior
    Answer: b. Encouraging open discussion of critical systems with strangersyoutubekeepnetlabs
31. Why does elicitation often succeed?
    a. Victims aren’t aware of the risk
    b. Systems are unpatched
    c. Lack of antivirus software
    d. Weak passwords
    Answer: a. Victims aren’t aware of the riskyoutubekeepnetlabs
32. Which is a subtle way to get someone to reveal sensitive operational details?
    a. Insult their performance
    b. Compliment achievements and ask related questions
    c. Send malware
    d. Print documents
    Answer: b. Compliment achievements and ask related questionshackcontrol+1
33. Who should be vigilant about elicitation attempts?
    a. Only IT staff
    b. All employees and executives
    c. Only receptionists
    d. Outsourced contractors
    Answer: b. All employees and executivestestpros+1
34. What type of conversation is most likely used in elicitation?
    a. Technical troubleshooting
    b. Casual, friendly chat
    c. Malware installation
    d. High-level negotiation
    Answer: b. Casual, friendly chattestpros+1
35. To minimize risk, organizations should:
    a. Hold regular awareness sessions
    b. Ignore suspicious questions
    c. Disable network connections
    d. Share system configurations
    Answer: a. Hold regular awareness sessionskeepnetlabsyoutube
36. In elicitation, the phrase “I heard your team manages hundreds of staff. Is that true?” is intended to:
    a. Clarify workforce
    b. Elicit corrections and reveal actual numbers
    c. Request a promotion
    d. Explain network settings
    Answer: b. Elicit corrections and reveal actual numbershackcontrol+1
37. Which should be avoided during internal meetings to prevent insider elicitation?
    a. Openly discussing future plans
    b. Sharing sensitive details with all attendees
    c. Using bracketing techniques
    d. Limiting access to sensitive topics
    Answer: b. Sharing sensitive details with all attendeessciencedirect+1
38. Elicitation is considered dangerous because:
    a. It uses psychological manipulation
    b. It relies only on tools
    c. It requires hacking skills
    d. It is very easy to detect
    Answer: a. It uses psychological manipulationsentinelone+1
39. Verbal tracing can be countered by:
    a. Redirecting conversation
    b. Analyzing malware
    c. Rebooting devices
    d. Installing patches
    Answer: a. Redirecting conversationigorvitale
40. Which regulator defines elicitation as strategic use of conversation to extract information?
    a. Federal Bureau of Investigation
    b. Microsoft
    c. IEEE
    d. Google
    Answer: a. Federal Bureau of Investigationsciencedirect
41. When in doubt, the best way to prevent information leaks during a conversation is to:
    a. Stay silent or give general info only
    b. Give detailed answers
    c. Trust all callers
    d. Disable antivirus software
    Answer: a. Stay silent or give general info onlytestpros+1
42. How can organizations spot attempted elicitation?
    a. By monitoring casual conversation for requests about sensitive topics
    b. Only scanning for malware
    c. Changing passwords daily
    d. Increasing software licenses
    Answer: a. By monitoring casual conversation for requests about sensitive topicskeepnetlabs+1
43. Elicitation is most effective when the target:
    a. Is distracted or off-guard
    b. Is using antivirus
    c. Works from home
    d. Has a strong firewall
    Answer: a. Is distracted or off-guardsciencedirect+1
44. Which group is a common target of elicitation in organizations?
    a. Executives
    b. Front desk staff
    c. IT employees
    d. All of the above
    Answer: d. All of the abovetestpros+1
45. What is the best countermeasure against elicitation attacks?
    a. Awareness and training
    b. Frequent system updates
    c. Using mobile devices
    d. Having a large workforce
    Answer: a. Awareness and trainingyoutubekeepnetlabs
46. Elicitation can be used to gather which kind of information?
    a. Non-sensitive
    b. Sensitive
    c. Both non-sensitive and sensitive
    d. Only public info
    Answer: c. Both non-sensitive and sensitivekeepnetlabs+1
47. Which statement is true about elicitation and social engineering?
    a. Elicitation is a sub-technique of social engineering
    b. Elicitation involves malware coding
    c. Elicitation targets only computers
    d. Elicitation requests software licenses
    Answer: a. Elicitation is a sub-technique of social engineeringwikipedia+1
48. Why are indirect questions more effective in elicitation than direct questions?
    a. They make the target less suspicious
    b. They require hardware skill
    c. They improve network speed
    d. They demand passwords
    Answer: a. They make the target less suspiciousigorvitale+1
49. Which example best illustrates a successful elicitation attempt?
    a. A person giving away server details after casual conversation
    b. Malware detected on a computer
    c. System reboot following a failure
    d. Successful password change
    Answer: a. A person giving away server details after casual conversationsciencedirect+1
50. What is the key concept to remember about elicitation in cybersecurity?
    a. It exploits human nature to extract valuable information
    b. It requires frequent network upgrades
    c. It is prevented by physical security only
    d. It always uses direct threats
    Answer: a. It exploits human nature to extract valuable informationwikipedia+1

1. https://keepnetlabs.com/blog/what-is-elicitation-in-cybersecurity-a-deep-dive-into-subtle-conversations-with-purpose
2. https://www.sciencedirect.com/topics/computer-science/elicitation
3. https://hackcontrol.org/blog/elicitation-techniques-in-intelligence-social-engineering/
4. https://en.wikipedia.org/wiki/Social_engineering_(security)
5. https://www.igorvitale.org/the-complete-guide-of-elicitation-and-counter-elicitation-techniques/
6. https://www.youtube.com/watch?v=mejMNnaxfXk
7. https://testpros.com/cybersecurity/social-engineering-elicitation-and-how-to-counter-it/
8. https://www.sentinelone.com/cybersecurity-101/threat-intelligence/what-is-social-engineering/
9. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
10. https://www.interviewbit.com/cyber-security-mcq/
11. https://www.yeahhub.com/cyber-security-ethical-hacking-mcq-questions-answers-part1/
12. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
13. https://interviewkickstart.com/blogs/articles/cyber-security-mcqs-answers
14. https://www.placementpreparation.io/mcq/cyber-security/
15. https://byjus.com/gate/cyber-security-mcqs/
16. https://www.igmguru.com/blog/cyber-security-mcqs
17. https://www.cliffsnotes.com/study-notes/21573756
18. https://www.simplilearn.com/what-is-elicitation-article
19. https://cybertalents.com/blog/what-is-social-engineering-toolkit-complete-guide
20. https://www.youtube.com/watch?v=VoIgMlryxWI