Answered

Someone calls and insists you need to bypass our security procedures to give him a one-time access code that he says he urgently needs in order to resolve a customer issue. What should you do?


ARefuse his request, but don't report it since he didn't get the information he asked for.
BHang up the phone and report the incident right away.
CGive him the code over the phone, but report the incident afterwards.

Verified Answer :

Final answer:

In cases of social engineering attempts, it is critical to uphold security protocols by refusing unauthorized requests. The best action is to hang up and report the incident immediately. This helps protect sensitive information and improve organizational security.


Explanation:

Understanding Social Engineering

Social engineering is a manipulation technique that exploits human psychology to gain confidential information. In the provided scenario, someone is attempting to bypass security by requesting an access code under misleading pretenses. The most appropriate action in such situations is to prioritize the security protocols of your organization.

Proper Response

In this case, the best course of action is:

  1. Hang up the phone and report the incident right away. This response is crucial because even if the caller does not obtain the requested information, it is important to alert your organization to potential security threats that could compromise sensitive information.

By reporting the incident, you help identify patterns of threats and ensure that your organization can enhance its security measures against future attacks. Always remember, never provide sensitive information over the phone, especially if you are unsure of the caller's identity.


Learn more about Social Engineering here:

https://brainly.com/question/36420305


Related Questions