A human resources generalist has received an email containing a request to change an employee's banking information. The email displays the name of the employee but the wrong email address. The…

The correct answer is C. A threat. This scenario describes a threat in which the human resources generalist received an email that was likely a phishing attempt or a social engineering attack. The email appeared to be from a legitimate source (the employee), but the wrong email address indicated it was…

Cloud Security and Compliance

Question

A human resources generalist has received an email containing a request to change an employee's banking information. The email displays the name of the employee but the wrong email address. The generalist makes the change. Which of the following is this an example of?

Options

AA vulnerability
BValidation
CA threat
DA breach

How the community answered

(25 responses)

A
4% (1)
B
4% (1)
C
84% (21)
D
8% (2)

Explanation

This scenario describes a threat in which the human resources generalist received an email that was likely a phishing attempt or a social engineering attack. The email appeared to be from a legitimate source (the employee), but the wrong email address indicated it was potentially fraudulent. The generalist acted on this request without proper verification, which exposes the organization to risk. A threat in this case refers to an event or action that has the potential to cause harm (in this case, altering banking information based on a deceptive email).

Topics

#social engineering#phishing#threat#security awareness

Community Discussion

No community discussion yet for this question.

Full CLO-002 Practice