A user receives an email from an unknown sender with a link that says 'Click here to view your tax refund'. The user is not expecting any tax refund. What should the user do?

Click the link to see if it is legitimate.

Reply to the sender to ask for more information.

Delete the email without clicking any links.

Hover the mouse over the link to see the actual URL before clicking.

An organization wants to enforce strong password policies and multi-factor authentication for all email accounts. The organization has a mix of technical and non-technical users. Which approach is most likely to be effective and user-friendly?

Allow users to opt out of MFA if they use a strong password.

Require complex passwords that change every 30 days and do not use MFA.

Require MFA using an authenticator app and provide training on how to use it.

Use SMS-based MFA because it is familiar to most users.

A company wants to implement email encryption for all outgoing messages. The company uses a mix of email clients, some of which support S/MIME and others that support PGP. The company wants a solution that works for all recipients without requiring them to install additional software. Which approach should the company choose?

Use a gateway-based encryption solution that sends a secure link to the recipient.

Use TLS for transport encryption.

A hospital sends patient referral letters via email to a specialist's office. The hospital wants to ensure that the email content remains confidential while stored on the mail servers and during transmission. Which approach should the hospital use?

Encrypt the email message with S/MIME using the recipient's certificate.

Send the letter as a plain text email and rely on the mail server's access controls.

Use a secure webmail portal that requires a password to view the message.

Use TLS for the SMTP connection between the hospital and specialist's mail servers.

What is the purpose of an email retention policy?

To prevent users from deleting any emails

To define how long emails should be kept and when they should be deleted or archived

To encrypt all emails in the mailbox

To automatically forward all emails to a backup address

EC-CouncilCertified Secure Computer User

Domain 3Objective 2

Securing Email Communications CSCU Practice Questions (Page 9)

Part of the Social Media and Email Security domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 4–7 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 41–45

41application · medium
A user receives an email from an unknown sender with a link that says 'Click here to view your tax refund'. The user is not expecting any tax refund. What should the user do?
Select an answer first
42expert · hard
An organization wants to enforce strong password policies and multi-factor authentication for all email accounts. The organization has a mix of technical and non-technical users. Which approach is most likely to be effective and user-friendly?
Select an answer first
43application · medium
A company wants to implement email encryption for all outgoing messages. The company uses a mix of email clients, some of which support S/MIME and others that support PGP. The company wants a solution that works for all recipients without requiring them to install additional software. Which approach should the company choose?
Select an answer first
44application · medium
A hospital sends patient referral letters via email to a specialist's office. The hospital wants to ensure that the email content remains confidential while stored on the mail servers and during transmission. Which approach should the hospital use?
Select an answer first
45foundation · easy
What is the purpose of an email retention policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.