Securing Email Communications CSCU Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A user receives an email from a known contact that contains a link to a document. The email says the document is a contract that needs to be reviewed. The user hovers over the link and sees that the URL is 'http://example.com/contract.pdf'. The user's email client does not show any security warnings. What should the user do?

   • AClick the link because the URL looks legitimate and the sender is known.
   • BContact the sender through a separate channel to verify the link.
   • COpen the link in a sandboxed environment to check for malware.
   • DCopy the link and paste it into a web browser to see if it is safe.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company's legal team requires that emails related to ongoing litigation be retained for at least 5 years. The company's standard email retention policy deletes emails after 90 days. What should the administrator do to comply with the legal requirement?

   • AChange the company-wide retention policy to 5 years.
   • BApply a legal hold to the relevant mailboxes to prevent deletion.
   • CDo nothing because the standard policy applies to all emails.
   • DManually export the emails to a separate archive and delete them from the mail server.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What should you do before opening an email attachment from an unknown sender?

   • AForward the attachment to a colleague to test it
   • BScan the attachment with antivirus software and verify the sender's identity through a separate channel
   • CReply to the sender asking if the attachment is safe
   • DOpen the attachment immediately to see if it is legitimate
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a common sign of a phishing email?

   • AThe email is sent from a known contact and contains only a link to a news article
   • BThe email contains a sense of urgency, such as threatening to close an account if you do not act immediately
   • CThe email has a professional signature with the company's logo
   • DThe email is sent during business hours and addresses you by your full name
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is considering implementing email encryption to protect sensitive client information. The company has two options: S/MIME and a gateway-based encryption solution. The company's clients use various email providers, and some clients do not have S/MIME certificates. The company wants to ensure that all clients can read encrypted emails without additional software. Which option should the company choose?

   • AS/MIME, because it provides end-to-end encryption.
   • BPGP, because it is widely supported.
   • CGateway-based encryption, because it can provide a secure web portal for clients to read messages.
   • DTLS, because it encrypts the connection between mail servers.
   Reveal Solution Discussion Select an answer first