Certified Ethical Hacker (CEH) Practice Question

A mandatory call-back policy forces the help-desk to terminate the inbound call, look up the employee's pre-registered contact number in the HR directory, and place an outbound call to continue the request. Attackers who spoof the internal IT number cannot answer a call made to the employee's real phone, so the social-engineering chain breaks. Port security and WPA3 harden network access but have no impact on voice-based credential harvesting. Time-based restrictions on resets inconvenience legitimate remote staff yet still allow an attacker to succeed during permitted hours.