FORTINET-NSE123 Nse 1 Foundational Cybersecurity Concepts Practice Question
Which TWO strategies are recognized as effective defenses against social engineering attacks like phishing and pretexting? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Conducting regular security awareness training and simulated phishing tests for all staff.
Effective defense against social engineering combines human security awareness training with robust technical email filtering controls.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Conducting regular security awareness training and simulated phishing tests for all staff.
Why this is correct
Training helps employees recognize suspicious cues and builds an organizational culture of security.
- ✓
Implementing multi-factor authentication (MFA) to protect user accounts even if credentials are exposed.
Why this is correct
MFA prevents attackers from gaining full access even if a user falls for a phishing lure and surrenders their password.
- ✗
Permitting unrestricted personal USB drive usage on all corporate endpoints without scanning.
Why it's wrong here
Allowing unmonitored USB drives increases the risk of baiting and malware introduction.
- ✗
Instructing employees to comply immediately with any urgent executive request received via personal email.
Why it's wrong here
Complying immediately without verification is exactly what social engineering attackers exploit.
- ✗
Disabling all spam and email filtering to ensure zero legitimate messages are ever delayed.
Why it's wrong here
Disabling filters floods user inboxes with malicious phishing emails, increasing compromise risks.
About these practice questions
This FORTINET-NSE123 question is part of Courseiva's 296-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Fortinet exam blueprint
This FORTINET-NSE123 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FORTINET-NSE123 exam.