Certified Ethical Hacker (CEH) — Question 85

When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?

Answer options

• A. Vulnerability scanning
• B. Social engineering
• C. Application security testing
• D. Network sniffing

Correct answer: B

Explanation

Social engineering is effective in assessing how well end-users are trained to recognize and respond to security threats. Vulnerability scanning, application security testing, and network sniffing focus on technical flaws and do not directly assess user awareness or behavior regarding security practices.