100-140 Question 331
Select 2A user contacts you stating that they received an email instructing them to download and install a software patch from a third-party website to fix a critical vulnerability. The sender claims to be from the IT department, but the email address seems unfamiliar. What steps should you take to handle this situation?
- A
Verify the email sender’s identity by contacting the IT department directly through official channels.
- B
Instruct the user to download and install the patch immediately to avoid security risks.
- C
Report the email as phishing or spam through the email client.
- D
Check if the third-party website is listed as a trusted source in the organization’s approved vendor list.
- E
Ignore the email as it is likely a scam.
Show answer and explanation
Correct answers: A, C
Explanation
When dealing with untrusted or unknown sources, it is critical to verify the sender's identity and report suspicious activity. This prevents potential phishing attacks or malware from being introduced into the organization’s network. Instructing users to act on unverified emails or ignoring them without reporting can result in significant security risks.
- A. Correct.
Verifying the sender’s identity through official channels ensures that the email is legitimate and not a phishing attempt. This is a critical first step.
- B. Incorrect.
Instructing the user to download and install the patch immediately without verification is risky, as the source is untrusted and could compromise the system.
- C. Correct.
Reporting the email as phishing or spam is a best practice to mitigate security risks and prevent other users from being targeted.
- D. Incorrect.
Checking the third-party website against an approved vendor list may help, but it is not a substitute for verifying the sender's identity and reporting suspicious emails.
- E. Incorrect.
Ignoring the email without taking appropriate steps to verify and report it could leave the user and organization vulnerable to potential threats.