A user is shopping online and notices that the website URL is 'http://www.bankofamerica.com' instead of 'https://www.bankofamerica.com'. The user enters their credit card information and later finds unauthorized charges. Which method of identity theft occurred, and what is the best prevention?

Data breach; the user should change their password immediately.

Skimming; the user should use a credit card with a chip.

Phishing via a fake website; always check for HTTPS and the correct domain name before entering sensitive information.

Phishing; the user should avoid online shopping altogether.

Which technical indicator might suggest an insider threat?

A user attempting to access files outside their department's shared folder

A user logging in from the office during business hours

A user receiving a large number of routine emails

A user's computer running a scheduled antivirus scan

What is a potential consequence of identity theft for an individual?

Increased trust from financial institutions

Improved credit rating due to new accounts

Damage to their credit score and financial standing

No long-term effects if caught early

A company wants to reduce the risk of insider threats without impeding daily operations. They have a mix of employees who need different levels of access to customer data. Which strategy is most effective as a first step?

Monitor all employee email and internet usage continuously

Disable all USB ports and external storage devices

Conduct a one-time security awareness training session

Implement role-based access control (RBAC) and review permissions quarterly

EC-CouncilEthical Hacking Essentials

Domain 4Objective 2

Insider Threats and Identity Theft EHE Practice Questions (Page 5)

Part of the Social Engineering domain, which makes up ~9% of our current practice bank.

39questions here

8free pages

7concepts

Questions 21–25

21application · easy
A user receives an email that appears to be from their bank, asking them to verify their account details by clicking a link. The user clicks the link and enters their username and password. Which method of identity theft has occurred?
Select an answer first
22application · medium
A user is shopping online and notices that the website URL is 'http://www.bankofamerica.com' instead of 'https://www.bankofamerica.com'. The user enters their credit card information and later finds unauthorized charges. Which method of identity theft occurred, and what is the best prevention?
Select an answer first
23foundation · easy
Which technical indicator might suggest an insider threat?
Select an answer first
24foundation · easy
What is a potential consequence of identity theft for an individual?
Select an answer first
25application · medium
A company wants to reduce the risk of insider threats without impeding daily operations. They have a mix of employees who need different levels of access to customer data. Which strategy is most effective as a first step?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.