Malware, Phishing, and Social Engineering SCE Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company is considering a new endpoint protection solution. They have a mix of Windows and macOS devices, and some employees work remotely without a VPN. The solution must be centrally managed and provide real-time protection against known malware. Which solution best meets these requirements?

   • AA network-based intrusion prevention system (IPS) that inspects all traffic at the corporate gateway.
   • BAn on-premises antivirus server that requires devices to connect to the corporate network for updates.
   • CA cloud-managed endpoint protection platform that supports both Windows and macOS and updates signatures automatically.
   • DA free antivirus product installed individually on each device with manual signature updates.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is a best practice to avoid falling victim to a phishing email that asks you to verify your bank account details?

   • AClick the link in the email to check if it looks legitimate
   • BReply to the email asking for more information
   • CContact your bank using a phone number from their official website
   • DForward the email to your colleagues to see if they received it too
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company wants to reduce the impact of credential theft from phishing attacks. They have already implemented email filtering and user awareness training. Which additional control would most directly mitigate the risk of compromised credentials being used?

   • ABlock all incoming email from external domains.
   • BInstall a web filter that blocks known phishing sites.
   • CIncrease the frequency of password changes.
   • DEnforce multi-factor authentication (MFA) for all user accounts.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   An analyst is investigating a phishing email that bypassed the email gateway. The email appears to come from a known vendor and contains a link to a document. The link points to a URL that uses the vendor's domain but with a slight misspelling. Which indicator is most reliable for determining if this is a phishing attempt?

   • AThe URL contains a misspelled domain name
   • BThe email contains a link to a document
   • CThe email was sent from a known vendor
   • DThe email was received during business hours
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following is a user-awareness practice that helps prevent malware infections?

   • AUsing the same password for all accounts
   • BDisabling the firewall
   • CAvoiding suspicious email attachments
   • DSharing passwords with colleagues
   Reveal Solution Discussion Select an answer first