Insider Threats and Identity Theft EHE Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company is reviewing its insider threat detection capabilities. They have a SIEM system that collects logs from various sources, but they are not sure how to use it to detect insider threats. They want to identify both malicious and negligent insiders. Which approach would be most effective?

   • AOnly monitor privileged users because they pose the greatest risk.
   • BCreate alerts for unusual access patterns, such as access outside business hours, access to unrelated systems, and large data transfers.
   • CDisable logging to reduce noise and focus on manual reviews.
   • DRely on employees to report suspicious activity of their peers.
   Reveal Solution Discussion Select an answer first
2. 32application · easy

   A user wants to protect their identity when shopping online. Which practice is most effective?

   • AUsing a credit card with fraud protection and monitoring statements
   • BUsing a debit card without monitoring
   • CSharing personal information on social media
   • DUsing the same password for all shopping sites
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company has a high-performing employee who has access to customer data. Recently, the employee has been working late, accessing the system from unusual locations, and downloading large amounts of data. The employee has also been seen taking photos of their screen. The company wants to address this without falsely accusing the employee. What is the most appropriate first step?

   • AImmediately terminate the employee's access and escalate to law enforcement
   • BPublicly warn all employees about insider threats
   • CConduct a private, non-confrontational conversation with the employee to understand the behavior
   • DMonitor the employee's activities more closely without informing them
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A user wants to protect themselves from identity theft. They frequently shop online and use social media. Which practice is most effective in reducing their risk?

   • AUse the same password for all accounts to make it easier to remember.
   • BShare passwords with close friends and family to help manage accounts.
   • CUse a unique, strong password for each online account and enable multi-factor authentication where available.
   • DAvoid using any online services to minimize exposure.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   An employee receives an email that appears to be from their bank, asking them to verify their account details by clicking a link and entering their username and password. The employee complies, and later discovers unauthorized transactions. Which method of identity theft occurred, and what is the most effective prevention measure?

   • AData breach; the employee should change their password immediately.
   • BSkimming; advise the employee to check ATM machines for card readers.
   • CPhishing; implement email filtering and conduct security awareness training.
   • DPhishing; the employee should avoid using online banking altogether.
   Reveal Solution Discussion Select an answer first