5.1. Describe Security Threats to the End User, Perform Basic Investigation, and Escalate to the Appropriate Team. 100-140 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A user receives a text message claiming their bank account is locked and asks them to click a link to verify their identity. The user does not recognize the number. What should the user do?

   • AContact the bank using the number on the back of their card to verify.
   • BReply 'STOP' to opt out of future messages.
   • CClick the link to see if the message is legitimate.
   • DDelete the message and ignore it.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An employee receives a phone call from someone claiming to be from the company's help desk. The caller ID shows the company's main number, and the caller asks the employee to verify their password to 'confirm their identity' after a supposed security breach. The employee is suspicious. What is the most likely threat, and what should the employee do?

   • AThis is a spam call; the employee should ignore it and not report it because spam is harmless.
   • BThis is a phishing email that was misdirected to the phone; the employee should ask for an email instead.
   • CThis is a legitimate help desk call because the caller ID matches the company; the employee should provide the password.
   • DThis is a vishing attempt using caller ID spoofing; the employee should hang up and call the help desk directly using a known number.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which type of malware is designed to secretly monitor a user's activities, such as keystrokes and browsing habits, and send that information to a third party?

   • ARansomware
   • BWorm
   • CVirus
   • DSpyware
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a common weak password pattern that should be avoided?

   • AUsing a sequence like 'abcdef'
   • BUsing a password manager to generate passwords
   • CUsing a mix of upper and lower case letters
   • DUsing a passphrase of multiple random words
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   A user notices that their account has multiple failed login attempts from an unfamiliar location. What should the user do first?

   • ADelete the account
   • BReport the activity to the IT help desk
   • CChange the password and continue working
   • DIgnore it, as it is likely a typo
   Reveal Solution Discussion Select an answer first