Securing Email Communications CSCU Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   An employee needs to send a spreadsheet containing customer credit card numbers to a colleague. The company's policy requires that sensitive data be protected both in transit and at rest. What should the employee do?

   • ACompress the spreadsheet into a ZIP file and attach it to the email.
   • BEncrypt the spreadsheet with a strong password and send the password in a separate email.
   • CUpload the spreadsheet to a secure file-sharing service and share the link with the colleague.
   • DSend the spreadsheet as an email attachment without any additional protection.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is required by law to retain certain business emails for five years, but also wants to minimize the risk of data exposure if the email system is compromised. Which strategy best balances these requirements?

   • AAutomatically archive required emails to an encrypted archive and set a deletion policy after five years.
   • BKeep all emails in the primary mailbox and rely on the email provider's security.
   • CDelete all emails after one year to minimize exposure.
   • DPrint and store paper copies of required emails and delete the electronic versions.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A marketing manager receives an email from a known vendor with an invoice attached as a PDF. The email text is generic and the attachment name is 'Invoice_2025.pdf'. The manager was not expecting an invoice this week. What is the safest action?

   • AScan the attachment with antivirus software and then open it.
   • BReply to the email asking if the invoice is legitimate.
   • CContact the vendor using a known phone number to verify the invoice before opening the attachment.
   • DOpen the attachment because it is from a known vendor and the file extension is PDF.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a social engineering tactic commonly used in email attacks?

   • ASending an email with a calendar invite to a meeting that does not exist
   • BPretending to be a trusted authority figure, such as a bank manager or IT administrator, to request sensitive information
   • CUsing a random subject line with no context to avoid detection by spam filters
   • DSending an email with a large attachment that consumes the recipient's storage
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An employee receives an email that appears to be from the company's IT help desk, stating that the employee's mailbox is over quota and that the employee must click a link and enter their email password within 24 hours to avoid deletion. The sender address looks similar to the real help desk address but has an extra character. What should the employee do?

   • AReport the email to the security team and do not click the link or enter credentials.
   • BForward the email to all employees to warn them about the possible phishing attempt.
   • CClick the link and enter the password because the message appears urgent and from a known department.
   • DReply to the email asking for confirmation before taking any action.
   Reveal Solution Discussion Select an answer first