ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 12 - D-SF-A-24 discussion

Report
Export

An A .R.T.I.E. employee received an email with an invoice that looks official for $200 for a one-year subscription. It clearly states: 'Please do not reply to this email,' but provides a Help and Contact button along with a phone number.

What is the type of risk if the employee clicks the Help and Contact button?

A.
People
Answers
A.
People
B.
Technology
Answers
B.
Technology
C.
Operational
Answers
C.
Operational
D.
Strategic
Answers
D.
Strategic
Suggested answer: A

Explanation:

People Risk Definition: People risk involves the potential for human error or intentional actions that can lead to security incidents1.

Phishing and Social Engineering: The scenario described is typical of phishing, where attackers use seemingly official communications to trick individuals into revealing sensitive information or accessing malicious links1.

Employee Actions: Clicking on the button could potentially lead to the employee inadvertently providing access to the company's systems or revealing personal or company information1.

Dell's Security Foundations Achievement: Dell's Security Foundations Achievement emphasizes the importance of recognizing and minimizing phishing exploits as part of managing people risk21.

Mitigation Measures: Training employees to recognize and respond appropriately to phishing attempts is a key strategy in mitigating people risk1.

In this context, the risk is categorized as 'people' because it directly involves the potential actions of an individual employee that could compromise security1.

asked 16/09/2024
PATRICK KOUOBOU
29 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first