QUESTION 30 Which statement describes why social engineering is successful? O People tend to forgo personal egos to better an organization. O People have a basic desire to withhold information for personal gain. O People have a basic desire to be helpful. People with a higher status may be coerced into providing information to those of lower status. QUESTION 31 Which statement explains why vishing is successful? O Vishing is successful because people desire to be helpful. O Vishing is successful because individuals normally seek to avoid confrontation and trouble. Vishing is successful because of the trust that individuals place in the telephone system. O Vishing is successful because people tend to trash information that might be used in a penetration attempt. QUESTION 32 Which statement identifies the best defense to prevent information from being obtained in a shoulder surfing attack? Small shields should be installed to block the view of a user's entry into a keypad. O The keypad system should be designed with "scrambled" numbers to help make shoulder surfing more difficult. Cameras should be installed over the keypad to record the area and the person entering the information. O Users should be aware of their surroundings and not allow individuals to get into a position from which they can observe what the user is QUESTION 33 Which strategy identifies one of the most common, least effective, and most dangerous security practices? Choosing poor passwords o Using encrypted signatures O Being too customer-focused o Hiding your employee badge QUESTION 34 Which term describes a type of phishing where individuals who are high up in an organization such as the corporate officers are targeted? O Whaling O Pharming DNS poisoning O Vishing