A project manager needs to share a confidential document with an external partner. The document contains sensitive business plans. Which method is most secure for sharing the document?

Save the document to a public cloud folder and share the link publicly.

Upload the document to a secure file-sharing service with a password-protected link and a limited expiration date.

Print the document and mail it via standard postal service.

Send the document as an email attachment without encryption.

A company's HR department received an email that appears to be from the CEO, urgently requesting that all employee W-2 forms be emailed to a specified external address. The email address is slightly different from the CEO's actual address. Several employees have already responded. What is the most effective immediate action?

Block the external email address and assume the issue is resolved.

Send an email to all employees telling them to stop responding, but do not take further action.

Contact the CEO directly by phone to confirm the request, and if it is not legitimate, instruct employees to ignore it and report the incident to IT.

Ignore the email because it is likely a phishing attempt.

An employee receives a phone call from someone claiming to be from the IT department, asking for the employee's password to 'fix a problem' with their email account. The employee has not verified the caller's identity. What is the most appropriate response?

Tell the caller to send an email request and then reply with the password.

Hang up and call the IT help desk using the official number to verify the request.

Ask the caller for their employee ID and then provide the password.

Provide the password because the caller says they are from IT and the problem sounds urgent.

EC-CouncilCertified Secure Computer User

Domain 1Objective 1

Introduction to Data Security CSCU Practice Questions (Page 4)

Part of the Data and Operating System Security domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 4–7 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

5concepts

Questions 16–20

16foundation · easy
Which of the following is a common threat to data security?
Select an answer first
17application · medium
A project manager needs to share a confidential document with an external partner. The document contains sensitive business plans. Which method is most secure for sharing the document?
Select an answer first
18expert · hard
A company's HR department received an email that appears to be from the CEO, urgently requesting that all employee W-2 forms be emailed to a specified external address. The email address is slightly different from the CEO's actual address. Several employees have already responded. What is the most effective immediate action?
Select an answer first
19application · medium
An employee receives a phone call from someone claiming to be from the IT department, asking for the employee's password to 'fix a problem' with their email account. The employee has not verified the caller's identity. What is the most appropriate response?
Select an answer first
20foundation · easy
Which of the following is an example of a data classification label?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.

Introduction to Data Security CSCU Practice Questions (Page 4)

Questions 16–20

Which of the following is a common threat to data security?

A project manager needs to share a confidential document with an external partner. The document contains sensitive business plans. Which method is most secure for sharing the document?

An employee receives a phone call from someone claiming to be from the IT department, asking for the employee's password to 'fix a problem' with their email account. The employee has not verified the caller's identity. What is the most appropriate response?

Which of the following is an example of a data classification label?

Keep studying — Data and Operating System Security