Securing Email Communications CSCU Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a safe practice when you receive an email containing a link?

   • AClick the link and then check if the website looks legitimate
   • BOpen the link in a new incognito window to avoid tracking
   • CHover over the link to see the actual URL before clicking
   • DCopy the link and paste it into a search engine to see if it is indexed
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A healthcare provider needs to send a patient's medical records to a specialist. The provider must comply with data protection regulations that require the records to be encrypted and access to be logged. The specialist's office uses a standard email system. Which solution best meets these requirements?

   • AUse S/MIME encryption and rely on the email server's logs for access tracking.
   • BUse a public cloud storage link with a shared password.
   • CSend the records as an encrypted PDF attachment via regular email.
   • DUse a secure messaging platform that encrypts messages and provides an audit log of access.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company receives an email from a supplier with a digitally signed message. The signature is valid, but the email contains a request to change the payment bank account details. The supplier's regular contact person is on vacation. What should the accounts payable team do?

   • AReply to the email asking for confirmation of the bank change.
   • BVerify the bank account change through a known phone number with the supplier's finance department.
   • CProcess the change because the digital signature proves the email came from the supplier.
   • DWait until the regular contact returns from vacation to verify the change.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   An employee receives an email that appears to be from the CEO, asking for a list of all employee social security numbers to be sent via email for a 'compliance audit'. The email is marked as urgent and the sender address is the CEO's official address. What should the employee do?

   • ASend the information but mark it as confidential.
   • BReply to the email asking for confirmation of the audit.
   • CVerify the request by calling the CEO using a known phone number.
   • DSend the information because the email is from the CEO's official address.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company needs to send encrypted emails to external partners who use various email clients. The company wants to ensure that all partners can decrypt the emails without requiring them to install additional software. Which approach is most appropriate?

   • AUse TLS for all SMTP connections to encrypt emails in transit.
   • BUse PGP, which requires each partner to generate a key pair and install PGP software.
   • CUse S/MIME, which is built into most major email clients and uses certificates from a public CA.
   • DUse a webmail portal that requires partners to log in to read encrypted messages.
   Reveal Solution Discussion Select an answer first