nerdexam
CompTIA

220-1102 · Question #492

A user receives a call from someone claiming to be a technical support agent. The caller asks the user to log in to the computer. Which of the following security measures should the user take to…

The correct answer is A. Only accept calls from known people. To ensure security and privacy when receiving unsolicited calls from supposed technical support, a user should only accept calls from known or verified individuals and organizations.

Security

Question

A user receives a call from someone claiming to be a technical support agent. The caller asks the user to log in to the computer. Which of the following security measures should the user take to ensure security and privacy?

Options

  • AOnly accept calls from known people.
  • BDisregard any suspicious emails.
  • CUpdate the antivirus software.
  • DEnable two-factor authentication.
  • EInstall a malware scanner.

How the community answered

(32 responses)
  • A
    91% (29)
  • C
    3% (1)
  • E
    6% (2)

Why each option

To ensure security and privacy when receiving unsolicited calls from supposed technical support, a user should only accept calls from known or verified individuals and organizations.

AOnly accept calls from known people.Correct

Only accepting calls from known people or verifying the identity of unsolicited callers through official channels is a fundamental security measure against social engineering attacks like tech support scams. This prevents attackers from gaining unauthorized access to systems or information by impersonating trusted entities.

BDisregard any suspicious emails.

Disregarding suspicious emails is a good practice, but it's irrelevant to a phone call scam scenario.

CUpdate the antivirus software.

Updating antivirus software is a technical control against malware, not a direct measure to handle unsolicited phone calls from scammers.

DEnable two-factor authentication.

Enabling two-factor authentication enhances login security, but it doesn't prevent a user from being tricked into granting remote access or divulging information over the phone.

EInstall a malware scanner.

Installing a malware scanner is a technical control against malware, not a direct measure to handle unsolicited phone calls from scammers.

Concept tested: Social engineering and identity verification

Topics

#Social engineering#Vishing#Security awareness#Impersonation

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice