An employee receives a direct message on a company social media account from a person claiming to be a client. The message says, 'I need you to verify your account by clicking this link and entering your login credentials.' The employee is unsure if the person is a real client. What should the employee do?

Click the link and enter the credentials to verify the account as requested.

Forward the message to the IT department and then click the link to see what happens.

Do not click the link, and verify the client's identity through a known, trusted contact method (e.g., the client's official email on file).

Reply to the message asking for the client's account number to verify their identity.

A user has a public social media profile and wants to start a small business from home. The user plans to share business-related posts and also personal updates. Which approach best protects the user's home address and family information while still promoting the business?

Keep the profile public but avoid posting any personal information, including photos of family.

Use a business name for the profile and do not reveal the user's real name.

Make the profile private and only accept friend requests from customers.

Keep the public profile for business and create a separate private profile for personal updates.

Why should you avoid sharing your real-time location on social media?

It makes your posts appear lower in the news feed

It can reveal your physical whereabouts to people you do not know

It uses up your mobile data allowance faster

It can slow down your internet connection

Which of the following is a sign that a friend request may be from a fake account?

The profile was created recently and has very little activity

The profile has a verified badge

The profile has a profile picture and a few posts

The profile has many mutual friends and a long post history

Which of the following is an example of a social engineering tactic used on social networks?

The platform sending you a notification about a new login

A friend tagging you in a photo

A friend posting a status update about their vacation

An unknown user sending you a message that says 'Click this link to win a free gift'

EC-CouncilCertified Secure Computer User

Domain 3Objective 1

Security on Social Networking Sites CSCU Practice Questions (Page 5)

Part of the Social Media and Email Security domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 4–7 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

6concepts

Questions 21–25

21expert · hard
An employee receives a direct message on a company social media account from a person claiming to be a client. The message says, 'I need you to verify your account by clicking this link and entering your login credentials.' The employee is unsure if the person is a real client. What should the employee do?
Select an answer first
22expert · hard
A user has a public social media profile and wants to start a small business from home. The user plans to share business-related posts and also personal updates. Which approach best protects the user's home address and family information while still promoting the business?
Select an answer first
23foundation · easy
Why should you avoid sharing your real-time location on social media?
Select an answer first
24foundation · easy
Which of the following is a sign that a friend request may be from a fake account?
Select an answer first
25foundation · easy
Which of the following is an example of a social engineering tactic used on social networks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.