A user wants to send a sensitive document to a colleague using an instant messaging application. The application does not offer end-to-end encryption. What is the most secure alternative?

Send the document as a password-protected ZIP file through the same messaging app.

Use a secure file-sharing service that encrypts files in transit and at rest, and share the link through a separate secure channel.

Compress the document and rename it to a non-obvious filename before sending.

Send the document via email without any encryption because email is private.

A small business wants to protect its employees' computers from internet-based attacks while allowing them to browse the web. They currently have no firewall or antivirus. What is the most effective first step?

Disable all internet access until a security audit is completed.

Rely on the web browser's built-in security features only.

Install a free antivirus on one computer and share it with others.

Enable the built-in firewall and install a reputable antivirus on each computer.

A company has implemented email filtering and user awareness training to reduce phishing. Despite these measures, an employee still falls for a targeted phishing email and provides their credentials. The IT team suspects the email bypassed the filter because it originated from a compromised legitimate account. What additional control would be most effective in preventing account compromise in this scenario?

Add a disclaimer to all incoming emails warning users to be cautious.

Increase the frequency of security awareness training.

Enforce multi-factor authentication (MFA) on all email accounts.

Block all emails from external senders.

A company's email security gateway flags an email as phishing, but the email appears to be from a legitimate business partner and contains an attachment that the employee is expecting. What should the employee do?

Open the attachment in a sandboxed environment to check for malware.

Override the gateway and open the attachment since it is expected.

Ignore the gateway warning and open the attachment.

Contact the business partner using a known phone number to verify they sent the email.

What is a recommended practice to prevent malware infections via email?

Use a public Wi-Fi network to check email securely

Forward suspicious emails to all contacts to warn them

Never open attachments or click links from unknown or unexpected senders

EC-CouncilCertified Secure Computer User

Domain 2Objective 2

Internet Security CSCU Practice Questions (Page 5)

Part of the Malware and Internet Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 21–25

21application · medium
A user wants to send a sensitive document to a colleague using an instant messaging application. The application does not offer end-to-end encryption. What is the most secure alternative?
Select an answer first
22application · medium
A small business wants to protect its employees' computers from internet-based attacks while allowing them to browse the web. They currently have no firewall or antivirus. What is the most effective first step?
Select an answer first
23expert · hard
A company has implemented email filtering and user awareness training to reduce phishing. Despite these measures, an employee still falls for a targeted phishing email and provides their credentials. The IT team suspects the email bypassed the filter because it originated from a compromised legitimate account. What additional control would be most effective in preventing account compromise in this scenario?
Select an answer first
24expert · hard
A company's email security gateway flags an email as phishing, but the email appears to be from a legitimate business partner and contains an attachment that the employee is expecting. What should the employee do?
Select an answer first
25foundation · easy
What is a recommended practice to prevent malware infections via email?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.