An employee receives an email that appears to be from the company's CEO, urgently requesting the employee to purchase gift cards and send the codes. The email address is slightly different from the CEO's actual address. What should the employee do?

Reply to the email to confirm the request is legitimate.

Verify the request by calling the CEO using the phone number on file.

Forward the email to the CEO's actual email address to ask if they sent it.

Comply with the request since it is from the CEO.

A user is browsing the web and sees a pop-up claiming their computer is infected and urging them to call a toll-free number for immediate support. What should the user do?

Call the number to get help from a certified technician.

Download the software recommended in the pop-up to remove the infection.

Close the pop-up and run a reputable antivirus scan to check for actual infections.

Click the pop-up to see more details about the infection.

A user frequently visits a website that requires login credentials. The user notices that the browser address bar shows a padlock icon, but the website's URL is 'http://example.com' rather than 'https://'. What is the most accurate conclusion?

The website is secure because the padlock icon indicates encryption.

The website is not secure, and the padlock icon may be misleading or the browser is displaying a warning.

The website is secure because the padlock icon is more important than the URL.

The website is secure because the user has visited it before without issues.

What is the primary purpose of internet security?

To replace all other forms of security with online measures

To protect data and systems from unauthorized access and cyber threats

To ensure faster internet connections for all users

To allow unrestricted access to all websites

Which of the following is a best practice for protecting personal data when using internet services?

Using the same password for multiple accounts

Sharing your location publicly on social media

Posting your full birth date and address online

Reviewing privacy settings and limiting the information you share

EC-CouncilCertified Secure Computer User

Domain 2Objective 2

Internet Security CSCU Practice Questions (Page 7)

Part of the Malware and Internet Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 31–35

31application · medium
An employee receives an email that appears to be from the company's CEO, urgently requesting the employee to purchase gift cards and send the codes. The email address is slightly different from the CEO's actual address. What should the employee do?
Select an answer first
32application · medium
A user is browsing the web and sees a pop-up claiming their computer is infected and urging them to call a toll-free number for immediate support. What should the user do?
Select an answer first
33expert · hard
A user frequently visits a website that requires login credentials. The user notices that the browser address bar shows a padlock icon, but the website's URL is 'http://example.com' rather than 'https://'. What is the most accurate conclusion?
Select an answer first
34foundation · easy
What is the primary purpose of internet security?
Select an answer first
35foundation · easy
Which of the following is a best practice for protecting personal data when using internet services?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.