Insider Threats and Identity Theft EHE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which strategy is most effective in mitigating insider threats by limiting the damage a single user can cause?

   • AImplementing the principle of least privilege
   • BDisabling all user accounts after working hours
   • CConducting annual security training only
   • DProviding employees with unlimited access to all systems
   Reveal Solution Discussion Select an answer first
2. 27application · easy

   A company discovers that a cybercriminal has used stolen employee data to open fraudulent credit accounts. Which of the following is the most direct consequence for the company?

   • AReduced insurance premiums
   • BReputational damage and potential legal liability
   • CImproved customer trust
   • DIncreased employee productivity
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company experiences a data breach that exposes employee social security numbers. The company must decide how to respond. Which response best balances legal obligations, employee support, and organizational reputation?

   • ANotify only employees whose data was definitely misused
   • BNotify affected employees promptly and offer credit monitoring services
   • COffer credit monitoring only to executives
   • DDelay notification until the investigation is complete
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A security analyst is reviewing user activity logs and notices that an employee in the finance department has been accessing the HR database, which is not required for their role, during late-night hours. The employee also recently failed a phishing simulation and has been seen writing down passwords on sticky notes. Which combination of indicators most strongly suggests a potential insider threat?

   • AFailing a phishing simulation and using sticky notes are the only indicators; the HR access is a false positive.
   • BThe employee's late-night hours are normal for flexible schedules, so no threat exists.
   • CThe employee's behavior is a sign of a compromised account, not an insider threat.
   • DAccessing unrelated systems, unusual working hours, and poor security practices.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is identity theft?

   • AThe unauthorized use of another person's personal information for fraud or deception
   • BThe legal change of one's name and identification documents
   • CThe act of creating a fake social media profile for entertainment
   • DThe process of encrypting personal data to protect it
   Reveal Solution Discussion Select an answer first