Insider Threats and Identity Theft EHE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is the best definition of an insider threat?

   • AAn external hacker who gains unauthorized access to a network
   • BA former employee who no longer has any system access
   • CA software vulnerability that allows remote code execution
   • DA person who uses their authorized access to harm an organization, either intentionally or unintentionally
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How can identity theft impact an organization?

   • AReduced regulatory scrutiny
   • BHigher stock prices due to media coverage
   • CLoss of customer trust and reputational damage
   • DIncreased customer loyalty due to enhanced security measures
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company is implementing an insider threat mitigation program. They have a high number of remote workers and a mix of full-time employees and contractors. The company wants to reduce the risk of data exfiltration without hindering productivity. Which combination of controls would be most effective?

   • AUse a single, strong password for all systems and require employees to share it with IT.
   • BImplement data loss prevention (DLP) tools, enforce least privilege, and conduct regular security awareness training.
   • CRequire all employees to work from the office to ensure physical security.
   • DMonitor all employee communications, including personal emails and messages.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is implementing an insider threat program. They have a limited budget and need to choose between investing in advanced user behavior analytics (UBA) tools or enhancing access controls and employee training. The company has a low rate of insider incidents but is concerned about a potential high-impact breach. Which approach is most balanced?

   • AInvest in UBA tools to detect anomalies early
   • BImplement both UBA and access controls but reduce training
   • CFocus solely on UBA tools and skip training
   • DEnhance access controls and provide regular training
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An employee discovers that their identity has been stolen and used to open a utility account. Which of the following is an appropriate step in the response process?

   • APay the utility bill to avoid conflict
   • BIgnore the incident if the utility account is small
   • CFile a report with the Federal Trade Commission (FTC)
   • DContact the utility company and provide personal information to verify identity
   Reveal Solution Discussion Select an answer first