Securing Email Communications CSCU Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why should you avoid oversharing personal information in emails?

   • ABecause email is only used for formal communication and personal details are not appropriate
   • BBecause email servers automatically delete messages after a short time
   • CBecause emails can be intercepted, forwarded, or stored indefinitely, increasing the risk of data exposure
   • DBecause email providers are legally required to read all messages
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An employee receives an email from a colleague with a link to a shared document. The email text is brief: 'Here is the file you asked for.' The employee did not ask for any file. What should the employee do?

   • AHover over the link to check the URL and then click if it looks legitimate.
   • BClick the link because it is from a known colleague.
   • CContact the colleague through a known phone number or in person to verify the link.
   • DReply to the email asking if the link is safe.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the recommended way to securely delete an email that contains sensitive information?

   • AForward the email to yourself and then delete the original
   • BRename the email subject to 'Confidential' and leave it in the inbox
   • CMove the email to a folder named 'Archive'
   • DDelete the email and then empty the trash or deleted items folder
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How does a digital signature provide authentication for an email message?

   • AIt proves the message was sent by the holder of the private key associated with the signature
   • BIt prevents the recipient from forwarding the message to others
   • CIt encrypts the message so only the recipient can read it
   • DIt ensures the message is delivered without being intercepted
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A user receives a phone call from someone claiming to be from the IT department, asking for the user's email password to 'verify the account'. The user has not initiated any support request. What should the user do?

   • AAsk the caller to send an email request for the password.
   • BPolitely decline to provide the password and report the call to the real IT department.
   • CProvide the password but then change it immediately after the call.
   • DProvide the password because the caller claims to be from IT.
   Reveal Solution Discussion Select an answer first