220-1102 Question #487: Real Exam Question with Answer & Explanation

Question

A user clicks a link in an email. A warning message in the user's browser states the site's certificate cannot be verified. Which of the following is the most appropriate action for a technician to take?

Options

• AClick proceed.
• BReport the employee to the human resources department for violating company policy.
• CRestore the computer from the last known backup.
• DClose the browser window and report the email to IT security.

Explanation

Upon encountering a browser warning about an unverified certificate after clicking an email link, the user should immediately close the browser and report the suspicious email to IT security.

Common mistakes.

• A. Clicking "proceed" ignores the security warning and could lead to compromise, data theft, or malware infection.
• B. While clicking a suspicious link might violate policy, the immediate priority is to contain the potential security threat, not punitive action against the employee.
• C. Restoring the computer from backup is an extreme measure usually taken after a confirmed infection, not merely a browser warning, and doesn't address the suspicious email itself.

Concept tested. Incident response for suspicious browser warnings

No community discussion yet for this question.