5.1. Describe Security Threats to the End User, Perform Basic Investigation, and Escalate to the Appropriate Team. 100-140 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A user receives a phone call from someone claiming to be from the company's IT help desk. The caller says there is a critical security issue and asks the user to verify their username and password immediately. The user notices the caller ID shows the company's main number. What should the user do first?

   • AHang up and call the IT help desk directly using a known number to verify the request.
   • BProvide the information because the caller ID matches the company number.
   • CReport the call to the police immediately.
   • DAsk the caller for their employee ID before giving any information.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A user's inbox is full of unsolicited emails offering cheap products and containing links. What is the primary risk of these emails?

   • AThey may contain phishing links or malware.
   • BThey will automatically change the user's password.
   • CThey will cause the user's computer to overheat.
   • DThey will slow down the user's internet connection.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A user receives an email that appears to be from their bank, stating that their account will be locked unless they click a link and verify their credentials. The sender's email address is a free webmail address, and the greeting is generic. What is the most likely security threat?

   • ASpam
   • BRansomware
   • CPhishing
   • DSpoofing
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Before running a malware scan, what should a user do to ensure the scan is effective?

   • AUpdate the antivirus definitions
   • BRestart the computer in Safe Mode
   • CDelete all temporary files
   • DDisconnect from the internet
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A user reports receiving a suspicious email with an attachment. They did not open it. What is the first step in the investigation?

   • AForward the email to all employees to warn them.
   • BSave the email and its metadata, then report it to the security team.
   • COpen the attachment to see if it is dangerous.
   • DDelete the email and forget about it.
   Reveal Solution Discussion Select an answer first