CEH - Certified Ethical Hacker Practice Questions: Social Engineering Domain

Published: June 9, 2025 | 5 min read

Test your CEH - Certified Ethical Hacker knowledge with 5 practice questions from the Social Engineering domain. Includes detailed explanations and answers.

CEH - Certified Ethical Hacker Practice Questions

Master the Social Engineering Domain

Test your knowledge in the Social Engineering domain with these 5 practice questions. Each question is designed to help you prepare for the CEH - Certified Ethical Hacker certification exam with detailed explanations to reinforce your learning.

Question 1

You are tasked with assessing a company's vulnerability to a USB drop attack. Which approach is most effective for this test?

A) Leave USB drives labeled 'Confidential' in the parking lot

B) Distribute USB drives at the reception labeled 'Company Policy'

C) Mail USB drives to employees labeled 'Free Software'

D) Place USB drives in the cafeteria labeled 'Photos from Event'

Show Answer & Explanation

Correct Answer: A

Explanation: USB drives labeled 'Confidential' left in the parking lot are likely to pique curiosity, leading employees to plug them into their devices to see the content.

Question 2

You are tasked with assessing the resilience of an organization against spear phishing attacks. Which approach would most effectively simulate this type of attack?

A) Creating generalized phishing emails targeting multiple employees.

B) Crafting personalized emails using information specific to high-value targets.

C) Sending SMS messages with malicious links to all employees.

D) Distributing malware via USB drives left in common areas.

Show Answer & Explanation

Correct Answer: B

Explanation: Spear phishing involves targeting specific individuals with personalized messages, making option B the most accurate simulation. Options A, C, and D describe other attack types that are not as targeted as spear phishing.

Question 3

Which of the following is the least effective method to prevent successful social engineering attacks within an organization?

A) Conducting regular security awareness trainings

B) Implementing strict access control policies

C) Using advanced firewall and IDS technologies

D) Simulating phishing attacks and providing feedback

Show Answer & Explanation

Correct Answer: C

Explanation: While advanced firewalls and IDS are critical, they do not directly prevent social engineering attacks, which often target human vulnerabilities rather than technical ones.

Question 4

During a security assessment, you decide to use a social engineering toolkit to test the client's email security. Which of the following tools allows you to clone a website and use it for phishing attacks?

A) SET (Social Engineering Toolkit)

B) Aircrack-ng

C) Hydra

D) John the Ripper

Show Answer & Explanation

Correct Answer: A

Explanation: The Social Engineering Toolkit (SET) is specifically designed for social engineering attacks and includes features to clone websites for phishing. Aircrack-ng is for wireless network testing, Hydra is for brute-force attacks, and John the Ripper is a password cracker.

Question 5

A company is worried about unauthorized access to their building. As an ethical hacker, which social engineering technique could you suggest to test their physical security measures?

A) Phishing emails targeting employees to gain network access.

B) Tailgating into the building behind an authorized employee.

C) Installing keyloggers on publicly accessible computers.

D) Scanning the network for open ports.

Show Answer & Explanation

Correct Answer: B

Explanation: Tailgating involves following an employee into a secure area without proper authentication and is an effective way to test physical security. Options A, C, and D do not address physical security testing directly.

Ready to Accelerate Your CEH - Certified Ethical Hacker Preparation?

Join thousands of professionals who are advancing their careers through expert certification preparation with FlashGenius.

  • ✅ Unlimited practice questions across all CEH - Certified Ethical Hacker domains
  • ✅ Full-length exam simulations with real-time scoring
  • ✅ AI-powered performance tracking and weak area identification
  • ✅ Personalized study plans with adaptive learning
  • ✅ Mobile-friendly platform for studying anywhere, anytime
  • ✅ Expert explanations and study resources
Start Free Practice Now

Already have an account? Sign in here

About CEH - Certified Ethical Hacker Certification

The CEH - Certified Ethical Hacker certification validates your expertise in social engineering and other critical domains. Our comprehensive practice questions are carefully crafted to mirror the actual exam experience and help you identify knowledge gaps before test day.

📘 Looking for the full study guide?
Check out our comprehensive guide: CEH Mock Exam Mastery: Practice Questions & Insights