A user frequently visits a website that uses HTTP instead of HTTPS. The user wants to protect their login credentials. What is the most effective action?

Use a VPN to encrypt the connection to the site.

Use a password manager to generate a unique password for the site.

Avoid using the site until it supports HTTPS.

Enter credentials only when the site shows a padlock icon.

What is the primary function of a firewall?

To provide a secure connection to a remote network

To encrypt all data on the hard drive

To detect and remove viruses from files

To block or allow network traffic based on security rules

A user is browsing the web and a website asks them to download a 'necessary codec' to play a video. What should the user do?

Provide the website with personal information to unlock the video.

Close the website and search for the video on a trusted site.

Download the codec from the website's provided link.

Allow the website to run the codec automatically.

A company wants to reduce the risk of phishing emails reaching employees. What is the most effective technical control?

Implement an email filtering solution that blocks suspicious attachments and links.

Require employees to use personal email for external communication.

Train employees to recognize phishing emails.

A journalist working in a country with restrictive internet censorship needs to communicate securely with a source. The journalist's organization requires that the communication be confidential and that the source's identity be protected. What is the most appropriate secure communication method?

Use a social media direct message feature because it is convenient.

Use an encrypted messaging app that offers end-to-end encryption and does not require a phone number for registration.

Use a standard email service with a strong password.

Use a public Wi-Fi network to avoid detection.

EC-CouncilCertified Secure Computer User

Domain 2Objective 2

Internet Security CSCU Practice Questions (Page 9)

Part of the Malware and Internet Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 41–45

41expert · hard
A user frequently visits a website that uses HTTP instead of HTTPS. The user wants to protect their login credentials. What is the most effective action?
Select an answer first
42foundation · easy
What is the primary function of a firewall?
Select an answer first
43application · medium
A user is browsing the web and a website asks them to download a 'necessary codec' to play a video. What should the user do?
Select an answer first
44application · medium
A company wants to reduce the risk of phishing emails reaching employees. What is the most effective technical control?
Select an answer first
45expert · hard
A journalist working in a country with restrictive internet censorship needs to communicate securely with a source. The journalist's organization requires that the communication be confidential and that the source's identity be protected. What is the most appropriate secure communication method?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.