An employee at your company is an avid traveler and regularly posts vacation photos with geotags and exact dates. The employee also posts about upcoming business trips. Which practice would most reduce the risk of burglary or targeted social engineering?

Share travel plans only in a private group of close friends, but include exact dates and locations.

Keep geotags enabled so friends know where you are, but set the posts to 'Friends only'.

Disable geotags but continue posting live updates about the trip.

Post vacation photos only after returning home, and avoid announcing exact travel dates in advance.

Which of the following is a safe practice when sharing photos on social media?

Sharing photos after checking that they do not reveal sensitive details

Sharing photos that include your home address in the background

Sharing photos of your boarding pass without blurring the barcode

Sharing photos with geotags enabled to show your exact location

A user frequently posts about their workplace, including the company name, job title, and photos of their office. A stranger sends a friend request and then messages the user asking about the company's internal software. What is the primary risk in this scenario?

The stranger might be a former employee with a grudge.

The stranger could hack into the company's network using the office photos.

The stranger could use the information to craft a targeted phishing attack against the user or the company.

The stranger might be a competitor trying to gather business intelligence.

A user's social media account was hacked, and the attacker posted offensive content and sent malicious links to the user's contacts. The user has regained control of the account by resetting the password. What should the user do next to minimize the impact?

Ignore the posts because the account is now secure.

Delete the offensive posts and send a message to contacts explaining that the account was compromised.

Delete the account and create a new one.

Change the password again and enable multi-factor authentication.

You receive a friend request on a social network from someone claiming to be a former colleague. The profile has only a few photos, no mutual friends, and the person immediately sends you a message asking for your personal email address to 'share an important document'. What is the most appropriate response?

Do not accept the request, and verify the person's identity through a known official channel before engaging.

Accept the request and provide your email address since they claim to know you.

Accept the request but do not share any personal information until you verify their identity.

Ignore the request and do not respond to the message.

EC-CouncilCertified Secure Computer User

Domain 3Objective 1

Security on Social Networking Sites CSCU Practice Questions (Page 4)

Part of the Social Media and Email Security domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 4–7 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

6concepts

Questions 16–20

16application · medium
An employee at your company is an avid traveler and regularly posts vacation photos with geotags and exact dates. The employee also posts about upcoming business trips. Which practice would most reduce the risk of burglary or targeted social engineering?
Select an answer first
17foundation · easy
Which of the following is a safe practice when sharing photos on social media?
Select an answer first
18application · medium
A user frequently posts about their workplace, including the company name, job title, and photos of their office. A stranger sends a friend request and then messages the user asking about the company's internal software. What is the primary risk in this scenario?
Select an answer first
19expert · hard
A user's social media account was hacked, and the attacker posted offensive content and sent malicious links to the user's contacts. The user has regained control of the account by resetting the password. What should the user do next to minimize the impact?
Select an answer first
20application · medium
You receive a friend request on a social network from someone claiming to be a former colleague. The profile has only a few photos, no mutual friends, and the person immediately sends you a message asking for your personal email address to 'share an important document'. What is the most appropriate response?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.