CS0-003 · Question #292
A payroll department employee was the target of a phishing attack in which an attacker impersonated a department director and requested that direct deposit information be updated to a new account…
The correct answer is B. Review the actions taken by the employee and the email related to the event. In case of a phishing attack, it's crucial to review what actions were taken by the employee and analyze the phishing email to understand its nature and impact.
Question
A payroll department employee was the target of a phishing attack in which an attacker impersonated a department director and requested that direct deposit information be updated to a new account. Afterward, a deposit was made into the unauthorized account. Which of the following is one of the first actions the incident response team should take when they receive notification of the attack?
Options
- AScan the employee's computer with virus and malware tools
- BReview the actions taken by the employee and the email related to the event
- CContact human resources and recommend the termination of the employee
- DAssign security awareness training to the employee involved in the incident
How the community answered
(66 responses)- A3% (2)
- B73% (48)
- C14% (9)
- D11% (7)
Explanation
In case of a phishing attack, it's crucial to review what actions were taken by the employee and analyze the phishing email to understand its nature and impact.
Topics
Community Discussion
No community discussion yet for this question.