A company wants to mitigate the risk of insider threats but is concerned about employee privacy and morale. Which approach balances security with employee trust?

Conduct random personal searches of employee belongings

Implement transparent monitoring policies and focus on behavior analytics

Monitor all employee communications without notice

Restrict all internet access for employees

A system administrator notices that an employee who works in finance has been accessing the human resources database, which is not required for their role. The employee has also been observed working late and printing sensitive documents. Which combination of indicators most strongly suggests a potential insider threat?

Accessing the HR database and working late

Working late and printing documents

Accessing unrelated systems and printing sensitive documents

Printing documents and receiving positive performance reviews

A system administrator notices that a long-tenured employee with no history of policy violations has started logging in during off-hours, downloading large amounts of customer data to a personal USB drive, and sending emails with attachments to a personal address. The employee's manager says the employee is under stress due to a recent demotion. Which type of insider threat does this scenario best represent, and what is the most immediate mitigation step?

Negligent insider; provide additional security awareness training and issue a warning.

Malicious insider; increase the employee's workload to keep them busy and reduce stress.

Compromised insider; reset the employee's password and run an antivirus scan.

Malicious insider; immediately revoke the employee's access and begin an investigation.

Which of the following is a recommended best practice to prevent identity theft?

Using the same password for all online banking sites

Clicking on links in emails from unknown senders

Using multi-factor authentication (MFA) on financial accounts

Writing down passwords and keeping them in a visible place

EC-CouncilEthical Hacking Essentials

Domain 4Objective 2

Insider Threats and Identity Theft EHE Practice Questions (Page 8)

Part of the Social Engineering domain, which makes up ~9% of our current practice bank.

39questions here

8free pages

7concepts

Questions 36–39

36application · medium
A company wants to mitigate the risk of insider threats but is concerned about employee privacy and morale. Which approach balances security with employee trust?
Select an answer first
37application · medium
A system administrator notices that an employee who works in finance has been accessing the human resources database, which is not required for their role. The employee has also been observed working late and printing sensitive documents. Which combination of indicators most strongly suggests a potential insider threat?
Select an answer first
38application · medium
A system administrator notices that a long-tenured employee with no history of policy violations has started logging in during off-hours, downloading large amounts of customer data to a personal USB drive, and sending emails with attachments to a personal address. The employee's manager says the employee is under stress due to a recent demotion. Which type of insider threat does this scenario best represent, and what is the most immediate mitigation step?
Select an answer first
39foundation · easy
Which of the following is a recommended best practice to prevent identity theft?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Insider Threats and Identity Theft EHE Practice Questions (Page 8)

Questions 36–39

A company wants to mitigate the risk of insider threats but is concerned about employee privacy and morale. Which approach balances security with employee trust?

Which of the following is a recommended best practice to prevent identity theft?

Keep studying — Social Engineering