Which of the following is a best practice for creating a strong email password?

Use a short password with only numbers to make it easy to remember

Use your birthdate and name so you never forget it

Use the same password for multiple accounts to avoid forgetting it

Use a passphrase of at least 12 characters with a mix of letters, numbers, and symbols

A user receives an email with an attachment that appears to be a Word document. The email claims to be from a shipping company with a tracking number. The user is expecting a package. The attachment has a .doc extension. What is the safest action?

Open the attachment in a sandboxed environment to check for malware.

Open the attachment because the user is expecting a package.

Verify the shipping company's tracking number on their official website before opening the attachment.

Reply to the email asking for more information about the shipment.

A law firm regularly exchanges draft contracts with a client. The firm wants to ensure that only the intended recipient can read the email content and that the recipient can verify the email truly came from the firm's partner. Which solution should the firm implement?

Use S/MIME to encrypt the message and digitally sign it with the partner's certificate.

Use TLS for the SMTP connection between the firm's and client's mail servers.

Use PGP with the client's public key only, without signing.

Send the contract as a password-protected ZIP file and share the password over a phone call.

A small business owner uses a single email account for all business communications. The owner wants to reduce the risk of account takeover without purchasing additional hardware. Which action is most effective?

Use a longer password and change it every 30 days.

Enable multi-factor authentication on the email account.

Set the email client to automatically download attachments.

Only check email on the owner's personal computer.

EC-CouncilCertified Secure Computer User

Domain 3Objective 2

Securing Email Communications CSCU Practice Questions (Page 6)

Part of the Social Media and Email Security domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 4–7 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 26–30

26foundation · easy
Which of the following is a best practice for creating a strong email password?
Select an answer first
27expert · hard
A user receives an email with an attachment that appears to be a Word document. The email claims to be from a shipping company with a tracking number. The user is expecting a package. The attachment has a .doc extension. What is the safest action?
Select an answer first
28application · medium
A company's email administrator wants to ensure that emails sent between the company's mail server and external mail servers are protected from eavesdropping during transmission. Which protocol should the administrator configure?
Select an answer first
29application · medium
A law firm regularly exchanges draft contracts with a client. The firm wants to ensure that only the intended recipient can read the email content and that the recipient can verify the email truly came from the firm's partner. Which solution should the firm implement?
Select an answer first
30application · medium
A small business owner uses a single email account for all business communications. The owner wants to reduce the risk of account takeover without purchasing additional hardware. Which action is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.