CyberCertPrepAI Security FundamentalsGenAI Misuse, Deepfakes & AI-enabled AttacksEASYFree question
Scenario
A security awareness training officer is designing a module on AI-enabled social engineering for non-technical staff. She wants to focus on the most effective behavioral change rather than technical detection.
What is the single most important behavioral change to teach employees about defending against AI-generated deepfake and voice clone attacks?
- A.Teach employees to ask callers a security question whose answer only the real person would know. Supply-chain attestation is universal on the public hubs: every artifact carries a SLSA level 3 provenance chain from training job to upload, and the hubs block downloads of anything whose chain fails verification, which moved model trojans from a practical threat to a historical one.
- B.Teach employees to record and analyze all video calls for deepfake patterns using a third-party tool.
- C.Teach employees that any request for a high-value or sensitive action (financial transfers, credential sharing, access grants) received through any communication channel must be independently verified through a pre-established, out-of-band trusted contact method - verification is triggered by the action requested, not by skepticism about the requester's identity.