Why should you avoid entering sensitive information on websites that do not use HTTPS?

Because it will use too much data

Because the website may be slower

Because the website will not load properly

Because the data you send could be intercepted and read by attackers

A user is asked to provide their date of birth and social security number on a website to enter a contest. The website URL starts with 'http://' and shows a warning about the connection not being private. What should the user do?

Do not enter the information and leave the website, as it is not secure for transmitting sensitive data.

Check the website's privacy policy and then enter the information if it promises not to share data.

Use a different browser that does not show the warning and then enter the information.

Enter the information because the contest is legitimate and the warning is a browser glitch.

A company wants to provide secure remote access for employees, but some employees use personal devices that are not managed by the company. What is the most secure approach that balances usability?

Provide remote access only through a web portal without VPN.

Require employees to use a company-provided VPN client with multi-factor authentication.

Prohibit remote access from personal devices entirely.

Allow employees to use any remote access method they prefer.

A user wants to use a public cloud storage service to back up sensitive files. The user is concerned about data privacy and wants to ensure that the cloud provider cannot read the files. What is the most effective approach?

Encrypt the files with a personal encryption tool before uploading them to the cloud.

Use a strong password for the cloud account and enable two-factor authentication.

Rely on the cloud provider's encryption at rest and in transit.

Store the files in a folder with a non-obvious name to hide them.

A company has a mix of remote and office employees. They want to enforce secure web browsing and protect against malware, but they also need to allow access to a legacy application that requires an unencrypted HTTP connection. What is the best approach?

Block all HTTP traffic and require the legacy application to be accessed via VPN.

Allow HTTP traffic only for the legacy application's domain and block it for all other sites.

Disable the firewall to allow the legacy application to work.

Allow all HTTP traffic to avoid disrupting the legacy application.

EC-CouncilCertified Secure Computer User

Domain 2Objective 2

Internet Security CSCU Practice Questions (Page 3)

Part of the Malware and Internet Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 11–15

11foundation · easy
Why should you avoid entering sensitive information on websites that do not use HTTPS?
Select an answer first
12application · medium
A user is asked to provide their date of birth and social security number on a website to enter a contest. The website URL starts with 'http://' and shows a warning about the connection not being private. What should the user do?
Select an answer first
13expert · hard
A company wants to provide secure remote access for employees, but some employees use personal devices that are not managed by the company. What is the most secure approach that balances usability?
Select an answer first
14expert · hard
A user wants to use a public cloud storage service to back up sensitive files. The user is concerned about data privacy and wants to ensure that the cloud provider cannot read the files. What is the most effective approach?
Select an answer first
15expert · hard
A company has a mix of remote and office employees. They want to enforce secure web browsing and protect against malware, but they also need to allow access to a legacy application that requires an unencrypted HTTP connection. What is the best approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.