Insider Threats and Identity Theft EHE Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A user receives a phone call from someone claiming to be from their bank, asking for their account PIN to verify identity. The user provides the PIN. Later, they discover unauthorized transactions. Which combination of prevention and response measures would have been most effective?

   • AShare the PIN only if the caller sounds official
   • BPost about the incident on social media to warn others
   • CNever share PINs over the phone and immediately contact the bank if fraud is suspected
   • DWait to see if the transactions are reversed automatically
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which method is commonly used to commit identity theft?

   • AUsing strong, unique passwords for all accounts
   • BPhishing emails that trick victims into revealing personal information
   • CEncrypting personal files on a computer
   • DRegularly monitoring credit reports
   Reveal Solution Discussion Select an answer first
4. 8application · easy

   An employee suspects that their identity has been stolen after noticing unauthorized charges on their credit card. What is the first step the employee should take?

   • AContact the credit card issuer to report the fraud and freeze the account
   • BPost about the incident on social media
   • CWait to see if more charges appear
   • DDelete all online accounts
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a behavioral indicator that may signal an insider threat?

   • AAn employee requesting a routine password reset
   • BAn employee regularly backing up their work to a company-approved server
   • CAn employee attending mandatory security awareness training
   • DAn employee suddenly working unusual hours without a valid business reason
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is an example of a proactive insider threat mitigation strategy?

   • AConducting regular employee security awareness training
   • BRevoking access only after an incident is discovered
   • CIgnoring minor policy violations to maintain morale
   • DWaiting for a formal complaint before investigating unusual behavior
   Reveal Solution Discussion Select an answer first